Privacy

Sample page. This text describes what the Gravure software does. Whoever runs this deployment should replace the parts in brackets, adapt it to their own service and have it reviewed before relying on it.

Gravure is run by [operator name] ([contact email]). This page describes the data the service handles when you use it.

Your account

There is no public sign-up: an administrator creates each account. The service stores your name, your email address and a hash of your password (never the password itself), in a Postgres database run by [database host].

Sign-in sessions

• When you sign in, the service sets one session cookie. It is needed to use the app and is not used for advertising.
• Each session is stored with its expiry (7 days), your browser's user agent and, when the hosting setup passes it on, your IP address. Signing out deletes the session.
• To slow down password guessing, the service counts requests to the sign-in endpoints per IP address, and failed sign-ins per email address over 15-minute windows.

Usage counters

To keep generations within daily limits, the service counts how many text, code and image generations each account runs per minute and per day. These counters hold numbers only, not prompts or results, and are removed automatically after about two days.

Prompts and images

• Your prompt, and any image you upload or link, is sent to the AI provider of the model you pick: OpenAI, Anthropic, Google or xAI, depending on the models this deployment has enabled. Each provider handles the request under its own terms and privacy policy.
• When you give an image URL, the service downloads the image itself and sends the provider the image, not the URL.
• The service does not save your prompts, uploads or results on its servers. When a provider call fails, the server logs the provider's status code and error message, without your prompt.

Stored in your browser

Your image history (each image with its prompt, time, aspect ratio and mode, up to 50 entries) is saved in your browser's local storage on this device. It never leaves your browser unless you reuse an image. You can delete entries in the app, or clear the site's data in your browser.

Analytics

[If Vercel Web Analytics is turned on for this deployment:] pages load Vercel's analytics script, which records page views. See Vercel's documentation for what it collects. [Otherwise, remove this section.]

Removing your data

Ask [contact email] to delete your account. Deleting it removes your account, its sessions and its usage counters. Data already sent to an AI provider is governed by that provider's retention policy.

Changes

Changes to this page are posted here. Last updated: [date].