Privacy policy

AI Plan Creator (“we”, “us”) runs the design service at aiplancreator.com and its apps, from New Zealand. We are responsible for the personal information described here. Contact: hello@aiplancreator.com.

• Your account: your name, email address and profile picture, from the Google or Facebook account you sign in with, and when you last signed in.
• What you make and upload: your designs and projects, the photos and files you upload, briefs and messages to the AI design agent, comments, and share links.
• Payments: your plan, subscription status and the designs you have bought, with the customer and subscription references Stripe gives us. Card details go to Stripe and never reach us.
• AI use: a record of each AI request (what it was for, which provider and model answered, its size and estimated cost), so that limits and daily credits can be counted.
• Connected assistants: if you connect Claude, ChatGPT, Grok or another assistant, which app it is, what you allowed it to do, and the tokens it uses to act for you.
• Messages to us: what you send through the contact page or by email.
• Technical: your IP address and browser details when you make a request, used for security and rate limits, and kept briefly in server logs.

• To provide AI Plan Creator: your account, your designs, AI features, the store, sharing and connected assistants.
• To take payments, manage subscriptions and trials, and keep the records tax law requires.
• To count usage against plan limits and daily AI credits, and to stop abuse.
• To send the emails the service needs (sign-in, receipts, invitations, changes to these terms). We do not send marketing email without your agreement.
• To keep AI Plan Creator secure, fix problems and improve it.

When you use an AI feature, what that request needs (your brief or message, the parts of the design it concerns, and any photo you give it) is sent to the AI provider that answers it: Google (Gemini) or DeepSeek, as chosen for that feature. They process it under their API terms to return an answer. DeepSeek is based in China and may process requests there.

We do not train AI models on your designs or uploads, and we do not sell them.

We share personal information only with the services that help us run AI Plan Creator, as far as each needs it:

• Stripe (payments and subscriptions);
• Google and Facebook (signing in, when you choose them);
• Google and DeepSeek (AI answers and pictures);
• Resend (sending email);
• the servers and storage that host AI Plan Creator;
• assistants you connect, for the designs and actions you allow;
• people you share a design with, through the link you create.

We may also disclose information where the law requires it, to protect people or AI Plan Creator, or to a buyer if the business is sold, under this policy. We do not sell personal information, and we do not share it for advertising.

Some of these services are outside New Zealand, including in the United States and China. When information goes overseas, we use providers that protect it under their contracts and the law that applies to them, comparable to New Zealand's Privacy Act 2020 and, where relevant, with the safeguards the GDPR and UK GDPR require.

We use a cookie to keep you signed in, and your browser's storage for conveniences such as remembered choices. We do not use advertising cookies or third-party analytics. Stripe's checkout pages, which are Stripe's, use their own cookies for payment security.

• Your account and designs: while your account is open. When you ask us to delete your account, we delete them within 30 days, except as below.
• Payment and purchase records: for seven years, as New Zealand tax law requires.
• AI request records: while your account is open, for limits, costs and abuse prevention.
• Server logs: briefly, as the servers rotate them.

Information travels encrypted (HTTPS), sign-in and connector tokens are signed or hashed, keys are kept out of the code, and access to the systems is limited. No system is perfectly secure; if a breach is likely to cause you serious harm, we will tell you and the regulator as the law requires.

You can ask to see the personal information we hold about you, to correct it, to have it deleted, or for a copy of it. Email hello@aiplancreator.com from the address on your account; we answer within 20 working days. Depending on where you live, you also have these rights:

• New Zealand: under the Privacy Act 2020, to access and correct your information, and to complain to the Office of the Privacy Commissioner (privacy.org.nz).
• Australia: under the Privacy Act 1988 and the Australian Privacy Principles, including complaint to the OAIC (oaic.gov.au).
• United Kingdom and European Economic Area: under the UK GDPR and GDPR, to access, rectify, erase, restrict or port your data and to object to processing, and to complain to the ICO or your local supervisory authority. We rely on our contract with you, our legitimate interests in running and securing the service, legal obligations, and your consent where we ask for it.
• Canada: under PIPEDA, to access and correct your information and to complain to the Office of the Privacy Commissioner of Canada.
• United States: where state laws such as California's CCPA apply, to know, correct and delete your information, and not to be treated differently for using these rights. We do not sell or share personal information for targeted advertising.

AI Plan Creator is not for children under 16, and we do not knowingly collect their information. If you think a child has given us information, contact us and we will delete it.

We will update this policy when what we do changes, show the date at the top, and tell account holders of important changes by email or in the app. The terms of use explain the rest of how AI Plan Creator may be used.