Privacy, without the fog.

Depending on how you use GRB Labs, we may collect:

• Account information, such as your email address, authentication identifiers and account status.
• Purchase and entitlement information, such as the product purchased, order status, licence status and the email associated with the order. Full payment-card details are handled by Lemon Squeezy and are not stored by GRB Labs.
• Support communications you send to us, including the information needed to investigate your request.
• Technical and security information, such as IP address, browser or device details, request logs and error information generated by our hosting and authentication providers.
• Demo-use information. A first-party cookie identifies an anonymous browser and lets us count eligible free exports. The server stores a one-way hash of that identifier, not the creative content you make.
• Website-extraction requests. When you deliberately ask SVG Studio to inspect a public webpage, we receive the URL you submit and transiently retrieve that page and its linked SVG files to produce the requested contact sheet.

GRB tools are designed to process creative work locally whenever practical. When a tool is described as local processing, your project files, fonts, text and active creative content are not uploaded to GRB Labs servers as part of that workflow.

SVG Studio’s optional website extractor is the exception: it sends the public URL you enter to GRB Labs so our server can retrieve the requested public page and return SVG candidates. GRB Labs does not retain those retrieved files as projects. Do not submit private, authenticated or signed URLs.

If a future feature needs to upload or synchronize your own creative content, the feature will explain that before the upload happens and this policy will be updated.

We use personal information to create and secure accounts, provide purchased access, deliver downloads, meter free use, process support requests, prevent abuse, maintain the service, satisfy legal obligations and improve reliability.

We do not sell personal information. We do not currently use third-party advertising trackers or sell customer profiles for targeted advertising.

We use service providers only where they help operate the business:

• Vercel hosts the website and browser tools.
• Supabase provides authentication, account data and product-entitlement records.
• Lemon Squeezy is the merchant of record and handles checkout, payments, taxes, receipts and refunds.
• Sanity provides product-catalogue and editorial content.
• Adobe Fonts delivers licensed web typography.

These providers may process information outside Canada under their own privacy and security terms. We may also disclose information when required by law, to protect users or the service, or as part of a legitimate corporate transaction.

We use first-party cookies and browser storage only to provide requested account and tool features, protect access, remember choices made on this device, recover local work and meter eligible anonymous demo use. We do not currently use advertising, cross-site tracking or behavioural-profiling cookies.

Access and authentication cookies are marked HttpOnly so page scripts cannot read them. Production cookies are sent securely and use SameSite protections. Blocking required storage may prevent sign-in, protected-tool access, demo delivery, preferences or local recovery from working.

We will update this notice and provide appropriate choices before adding non-essential advertising or cross-site tracking.

We keep information only as long as reasonably needed for the purposes above, including legal, accounting, fraud-prevention and support requirements. Local project data remains under your control in your browser or on your device.

You may ask to access, correct or delete personal information under our control, or withdraw consent where applicable, by emailing support@grblabs.co. Some transaction records may need to be retained where required by law or by the merchant of record.

We use reasonable administrative and technical safeguards appropriate to the information we handle. No internet service is completely risk-free, so please use a unique password and protect your account credentials.

GRB Labs is built for working creatives and is not directed to children under 13. We may update this policy as the products or legal requirements change. Material changes will be identified by a new effective date and, where appropriate, an additional notice.