Legal
Privacy Policy
Last updated
In short
- No analytics, no advertising, no tracking across sites, and we do not sell or rent data.
- The halftone, depth map, kerf and blank tools, and the editor, work in your browser: those images and files are not uploaded.
- Tracing and AI features run on our server and on the providers listed below. Your brief and your image go to them only to make your result.
- Guest work is deleted after 48 hours. Deleting your account deletes your profile, your designs and your stored files.
- You can ask for a copy, a correction or deletion at support@makerwizard.com.
This summary is here to help. The full text below is what applies.
1Who is responsible
MakerWizard is operated by a limited liability company (s.r.o.) established under the laws of the Slovak Republic. Its business name, registered office, identification number and entry in the Commercial Register will be published here before MakerWizard accepts any payment. Until then no paid plan or pack is offered for sale, and you can reach the operator at support@makerwizard.com.
That operator is the controller of your personal data under the EU General Data Protection Regulation (GDPR). We have not appointed a data protection officer; write to support@makerwizard.com about anything in this policy.
2What we process, why, and for how long
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Account: name, email, password (stored only as a hash). With Google sign-in: your Google account id, name, email, picture address and the sign-in tokens Google issues. | To give you an account and sign you in. | Contract (GDPR Art. 6(1)(b)) | Until you delete the account. |
| Security: sessions with the IP address and browser they were opened from; your two-step secret and backup codes; the public keys of your passkeys. | To keep the account yours and to show you where it is signed in. | Contract; our legitimate interest in security (Art. 6(1)(f)) | A session ends after 7 days without use. The rest until you remove it or delete the account. |
| Guest use: a random guest identifier and its session. | To let you try the workspace and keep your work while you decide. | Steps you asked for before a contract (Art. 6(1)(b)) | 48 hours, then deleted with everything made under it. |
| Your content: the sentences you type, the images and photos you give to AI features, the drawings, traces, products and listing photos made from them. | To make, store and show you your results. | Contract | Until you delete the item or the account. An image uploaded only to be traced, and a photo used for a product cut-out, are processed and not stored; the result is. |
| Exports and purchases: your balance and its history, what you bought and when, your Stripe customer number. Card details never reach us. | To charge, refund and show you your usage; to keep accounts as the law requires. | Contract; legal obligation (Art. 6(1)(c)) | In the app until you delete the account. Invoices and payment records are kept for 10 years under Slovak accounting law. |
| What you share on Explore: the design, its check result, your first name, likes. | Because you chose to publish it. | Contract (your instruction) | Until you stop sharing it or delete the account. |
| Emails we send you: address, the message, delivery status. | Confirming your address, resetting a password, receipts, notices about these terms. | Contract; legal obligation | With the account; delivery logs at our email provider for a limited time. |
| Abuse prevention: your IP address in the server's memory, counted against rate limits. A brief the filter refuses is not stored; only a one-way hash of it is logged. | To stop scripted abuse of free and paid features. | Legitimate interest | At most one hour in memory. Hashes with the server logs. |
| Diagnostics: error reports (what failed, in which browser and page), set up not to include your name or email; ordinary server and network logs. | To find and fix faults and attacks. | Legitimate interest | Up to 90 days. |
We do not use your content to train models, we do not build advertising profiles, and no decision with legal or similarly significant effect is made about you by automated means. The content filter is automated; all it can do is refuse a brief.
3Who else processes it
We use these companies to run MakerWizard. Each receives only what its job needs and processes it on our instructions.
| Recipient | What for | What it receives | Where |
|---|---|---|---|
| Hetzner Online | Servers and database | Everything stored in the app | EU (Germany or Finland) |
| Cloudflare | Network protection and delivery; file storage (R2); encrypted database backups | Your traffic including IP address; your stored files; backups, kept 30 days | EU and worldwide network |
| Stripe | Payments | Email, what you buy, your payment details (entered on Stripe's page) | Ireland, USA |
| Resend | Sending email | Your email address and the message | USA |
| fal.ai (and the model providers it runs, including Google and OpenAI models) | AI drawings, background removal, listing photo scenes | The brief you wrote and the image or photo you gave to that feature | USA |
| TypeSafe | Understanding a product brief | The sentence you typed for a product | Outside the EU; treated as a transfer |
| Anthropic | Planning a free-form product | The sentence you typed for a product, when that planner is used | USA |
| Sign-in with Google, only if you choose it | That you are signing in to MakerWizard | Ireland, USA | |
| Sentry | Error monitoring | Technical error reports | EU or USA |
We also disclose data when the law requires it, and to a successor if the service is ever transferred, under this policy.
4Transfers outside the EU
Some of these companies are in the United States. Transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise on the Commission's standard contractual clauses. You can ask us for a copy of the safeguards that apply to a recipient.
5Your rights
Under the GDPR you can:
- ask what we hold about you and get a copy;
- have it corrected, or deleted;
- have its processing restricted, or object to processing that rests on our legitimate interest;
- receive the data you gave us in a portable format;
- withdraw a consent, where we ever ask for one.
Most of this you can do yourself: change your name under Account, delete a design in the workspace, delete the whole account under Account, Security. For anything else write to support@makerwizard.com from your account's address; we answer within one month. You can also complain to a data protection authority: ours is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk), or the one where you live.
6What deleting does
Deleting a design removes it and its file. Deleting your account removes your profile, sessions, sign-in methods, balance and history, designs, likes, and every file stored for you. Copies inside our encrypted backups disappear as those backups expire, within 30 days. What the law obliges us to keep (invoices and payment records) is kept for that purpose only.
7Photos of other people
If you upload a photo that shows someone else, you decide to do so and you are responsible for having their permission. We process it only to make your result, as described above.
8Children
MakerWizard is not meant for children under 16, and we do not knowingly keep their data. If you believe a child has created an account, tell us and we delete it.
9How we protect it
Connections are encrypted. Passwords are stored as hashes; you can add two-step sign-in and passkeys. Only our server writes to the database and the file store, each account's files live under its own path and every access is checked against it, and payment details never touch our systems. No system is perfectly secure; if a breach puts you at risk we tell you and the authority as the law requires.
10Cookies
We use only the cookies and browser storage that signing in and the tools themselves need. The full list is in the Cookie Policy.
11Changes
When MakerWizard starts processing data in a new way, this page changes first, with its date. If the change matters to you we email account holders before it applies.