Pack AI

Legal

Privacy Policy

Last updated: 28 July 2026

1. Who we are

Pack AI (“we”, “us”) is a web application that helps you design packaging dielines. This policy explains what information we collect when you use packai.tech, why, and who else sees it.

2. What we collect

  • Account email. If you sign in, we store your email address so we can authenticate you and associate your saved projects with your account.
  • Project content. When you save a project, we store the dieline (as a normalized SVG), the detected panel geometry, your design (text layers, per-panel colors, uploaded images) and any recognized physical dimensions. Uploaded images are stored as data URLs inside the project row.
  • Authentication cookies. Sign-in uses a session cookie from our auth provider. It is strictly necessary and set only when you sign in.
  • Analytics, only with your consent.If you accept analytics in our cookie banner, we use Google Analytics (GA4) to understand how visitors find and use Pack AI: pages viewed, approximate location derived from your IP, device and browser type, the source that referred you (such as a search engine or a link, including any UTM campaign tags), and whether a visit led to a subscription. Analytics are off by default until you accept, and you can withdraw consent at any time via “Cookie settings” in the footer. We do not use advertising cookies.
  • Brief content, when you use AI drafting. The text fields you enter on the AI brief page (product, brand, tagline, colors, audience, copy) plus the detected panel geometry are sent to our AI provider to generate a layout. Your dieline file itself is not sent to the AI provider.

Aside from the strictly necessary sign-in cookie, no cookies or tracking identifiers are set unless you opt in to analytics.

3. How we use it

Your data is used only to provide the service:

  • Authenticate you and keep you signed in.
  • Save, list, load, and delete projects you create.
  • Generate AI drafts when you request them.

We do not sell your data, and we do not share it with any party that isn't listed below.

4. Third parties that process your data

  • Supabase — database, storage, and authentication. All project rows and auth sessions live here. See supabase.com/privacy.
  • Anthropic — AI brief generation. Only invoked when you submit the AI questionnaire; only the brief fields + panel geometry are sent. See anthropic.com/legal/privacy.
  • Stripe — payment processing for subscriptions. When you subscribe, Stripe handles your payment details (we never see full card numbers), and we attach the source that referred your visit to the subscription for attribution. See stripe.com/privacy.
  • Google Analytics (GA4) — website analytics, loaded only if you accept analytics in the cookie banner. See Google's privacy policy.
  • Vercel — hosts the application. Standard server request logs apply. See vercel.com/legal/privacy-policy.
  • Google Fonts — loaded on the client when you use a Google Font in a text layer. See Google's font privacy notice.

5. Where data is stored

Project data is stored in our Supabase project (EU region). Vercel serves the site from regional edges.

6. Your rights

You can access, correct, or delete your data at any time by using the Open dialog in the editor to delete individual projects, or by emailing us (see Contact) to delete your account entirely. If you live in the EU, UK, California, or anywhere with similar privacy law, the usual rights apply.

7. Children

Pack AI isn't directed at children under 13 and we don't knowingly collect data from them.

8. Changes

We may update this policy. When we do, we'll revise the “Last updated” date at the top. Material changes will be flagged where you sign in.

9. Contact

Questions or requests: see the contact page.