1. Introduction

Welcome to Huedini ("we," "us," or "our"). We provide color and AI image tools through our Figma plugin and our website at https://huedini.app (the "Service").

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, protect, and share your information when you use our Service. It also describes your privacy rights and how the law protects you.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain Our Service: To create and manage your account, store palettes and image history, organize images by Figma document, and process your requests with the AI providers described below.
• To Improve and Personalize the Service: To manage your saved palettes, provide access to features, and remember your settings.
• For Security and Fraud Prevention: To use your IP address for rate limiting (e.g., on our support form) and to protect our Service and your account from unauthorized access or abuse.
• To Communicate With You: To respond to your inquiries, requests, and questions submitted via our support form. All authentication-related emails (e.g., password resets) are managed and sent by our authentication provider, Supabase. We do not send marketing emails or newsletters.

4. How We Share and Disclose Your Information

We do not sell, rent, or trade your personal information. We only share your data with the following categories of third-party service providers who help us operate and improve our Service:

• Authentication Provider: We use Supabase (Supabase.com) to manage user accounts, authentication, and secure login sessions. If you choose Google, GitHub, or Apple sign-in, that provider also processes your sign-in request.
• Database, Image Storage, and Hosting: We use Supabase (supabase.com) to store account data, palettes, prompts, Figma document identifiers and names, original images submitted for editing, and generated or edited images. Our website, hosted plugin interface, and online services run on Google Cloud through Firebase.
• OpenAI: The plugin's current AI image generation and editing features send your prompt and any selected palette colors to OpenAI. Editing also sends the image you select or upload. OpenAI returns the generated or edited image to Huedini. We do not include your Figma document identifier or document name in these AI requests unless you include that information yourself in the prompt or image.
• Google AI (Gemini): AI palette generation sends your palette description and requested color settings to Gemini. Huedini also retains its earlier Gemini image generation and editing services for clients that use them; those requests send the prompt, any selected palette colors, and the source image when editing to Google instead of OpenAI.
• Email Delivery: We use Resend (resend.com) to deliver your name, email address, and support message to our support inbox.
• Infrastructure Services: Upstash Redis (upstash.com) processes rate-limit identifiers and usage data to prevent abuse. It also temporarily stores login information, including session tokens and basic account information, while your browser completes sign-in for the Figma plugin.
• Asset Delivery: We use Cloudinary to serve illustrations and other site or plugin assets. Loading these assets sends Cloudinary your IP address and ordinary browser request information. This asset delivery is separate from storage of your AI images in Supabase.

Providers may retain submitted content and outputs under their applicable terms, privacy policies, and account settings. Deleting your Huedini history does not automatically request deletion of their copies. Choose prompts and images that you are comfortable sharing with the provider handling your request.

• Legal Requirements: We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

5. Data Security and Retention

• Security: Our production services use HTTPS and Supabase authentication. Access controls are intended to restrict access to account content. No service can guarantee complete security.
• Saved Content: Account information, saved palettes, AI history, original edit images, generated or edited outputs, and associated document information do not currently have an automatic deletion period. They may remain until you delete supported items or contact us to request removal. Expiration of an image download link does not delete the stored image.
• Deletion Limits: Deleting an image from history removes its entry and stored output unless another saved image or style reference still uses that file. When it is the last output of an edit or generation, we also remove the recorded original edit images and the generation's prompt and history, unless another saved image or style reference still uses those files. If cleanup fails, we retain the history entry and a deletion record so the operation can be retried. Other outputs retain their shared originals and generation history. Failed saves with no output also attempt this cleanup; unfinished deletion records may require support to retry. Collection names and document information, files left without a record by an interrupted upload, and shared files can remain. Deleting a saved palette may also leave its AI generation history. Contact us for removal of this associated data. Deleting content in Huedini does not remove copies you inserted into a Figma document, downloaded, or shared, and does not automatically delete copies retained by AI providers.
• Temporary and Operational Data: Color extraction processes image data for the request without saving it to image history. Temporary Figma sign-in records expire within ten minutes. Server logs, rate-limit records, support emails, and any provider backups have separate retention periods; we do not currently publish a fixed deletion schedule for them. Support messages can remain in our inbox and email delivery records after we respond.

6. Your Rights and Choices

You have rights and choices regarding your personal information:

• Access and Correction: You can access and update account information where controls are available in the Service. You can view, manage, and edit your color palettes and image history within the Service. For other access or correction requests, please contact us.
• Deletion: You can delete your saved content using the available palette and image-history controls, subject to the deletion limits above. To request deletion of your account, original edit images, prompts, document information, or other associated data, please contact support@huedini.app. We will review your request and explain any data we cannot remove or must retain.
• Opt-Out of Communications: We do not send marketing emails, so there is no need to opt out.
• Cookie Control: You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you disable essential authentication cookies, you will not be able to log in and use certain features of the Service.

7. Children's Privacy

Our Service is not intended for or directed at children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child without parental consent, we will take steps to delete that information promptly.

8. Your Rights Under GDPR (For Users in the EEA/UK)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have the following data protection rights:

• The right to access, update, or delete the information we have on you.
• The right of rectification.
• The right to object to our processing of your personal data.
• The right of restriction to request that we limit the processing of your personal information.
• The right to data portability to receive a copy of your data in a structured, machine-readable format.
• The right to withdraw consent at any time where we relied on your consent to process your information.
• The right to lodge a complaint with your local Data Protection Authority.

9. Your Rights Under CCPA (For California Residents)

If you are a California resident, you have the following rights:

• The right to know what personal information we collect about you and how it is used and shared.
• The right to delete personal information we have collected from you (with certain exceptions).
• The right to opt-out of the sale of your personal information. We do not sell your personal information.
• The right to non-discrimination for exercising your privacy rights.

To exercise any of the rights described above, please contact us at support@huedini.app.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@huedini.app