Privacy Policy

1. Introduction

Maesto LLC ("Company", "we", "us") operates IconsMint ("Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service. By using IconsMint, you agree to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your email address, name, and password (hashed). If you sign in with Google, we receive your name, email, and profile picture from Google's OAuth service.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card number, CVV, or full card details on our servers. We retain your Stripe customer ID and subscription status to manage your account.

Usage Data

We collect information about how you interact with the Service, including icons downloaded, icon sets generated, pages visited, and feature usage. This helps us improve the product and troubleshoot issues.

Device & Log Data

We automatically collect standard log information such as IP address, browser type, operating system, referring URLs, and timestamps. This data is used for security, analytics, and service optimization.

3. How We Use Your Information

• •Provide, operate, and maintain the Service
• •Process subscriptions and payments
• •Send transactional emails (welcome, invoices, password resets)
• •Improve and personalize your experience
• •Monitor and prevent abuse, fraud, or security threats
• •Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We share data only with the following categories of service providers, strictly as needed to operate the Service:

• •Stripe — payment processing
• •Google — OAuth authentication (if you choose Google sign-in)
• •AI service providers — icon generation processing (text prompts only, no personal data)
• •Hosting providers — infrastructure and CDN services

We may also disclose information if required by law, legal process, or to protect the rights and safety of our users or the public.

5. Cookies

We use essential cookies to maintain your session and authentication state. We do not use tracking cookies or third-party advertising cookies. Your access token is stored as an HTTP cookie to keep you signed in.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., billing records). Anonymized usage data may be retained indefinitely for analytics purposes.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), hashed passwords (bcrypt), and secure infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• •Access the personal data we hold about you
• •Request correction of inaccurate data
• •Request deletion of your data
• •Object to or restrict processing of your data
• •Export your data in a portable format

To exercise any of these rights, reach out to us through the support widget on our website or email us at support@iconsmint.com.

9. Children's Privacy

The Service is not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. The "Last updated" date at the top reflects the most recent revision.

11. Contact

If you have any questions about this Privacy Policy, please reach out through the support widget on our website or email us at support@iconsmint.com.