EdgeIcons Privacy Policy

1. Introduction

Verus Software Inc., operating as EdgeIcons ("Company," "we," "us," "our"), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you access or use our AI-powered SVG icon generation API, website, and related services (collectively, the "Service").

This Privacy Policy applies to all users of the Service, including visitors to our website, registered account holders, and API consumers. By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Service.

This Privacy Policy should be read in conjunction with our Terms of Service, which are incorporated herein by reference.

2. Information We Collect

We collect information in several ways depending on how you interact with our Service.

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

2.3 Information from Cookies and Similar Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your interactions with the Service. This includes:

• Session cookies (to maintain your logged-in state)
• Preference cookies (to remember your settings)
• Analytics cookies (to understand usage patterns)
• Marketing cookies (to deliver relevant communications)

For more details, please see Section 10 (Cookies and Tracking Technologies) below.

2.4 Information from Third Parties

We may receive information about you from third-party sources, including:

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Operating the Service

• Creating and managing your account
• Processing your API requests and generating icons
• Authenticating access and maintaining security
• Processing payments and managing subscriptions
• Providing customer support and responding to inquiries
• Delivering the features and functionality you request

3.2 Improving and Developing the Service

• Analyzing usage patterns to understand how the Service is used
• Identifying and fixing bugs, errors, and technical issues
• Developing new features, products, and services
• Improving our AI models and generation quality
• Conducting research and development
• Testing and quality assurance

3.3 Communications

• Sending transactional emails (account confirmations, receipts, security alerts)
• Providing important notices about the Service (maintenance, policy changes)
• Responding to your inquiries and support requests
• Sending promotional communications (with your consent, where required)
• Requesting feedback and conducting surveys

3.4 Security and Fraud Prevention

• Detecting, preventing, and investigating security incidents
• Protecting against unauthorized access, fraud, and abuse
• Enforcing our Terms of Service and Acceptable Use Policy
• Monitoring for violations and suspicious activity
• Maintaining the integrity and security of our systems

3.5 Legal and Compliance

• Complying with applicable laws, regulations, and legal processes
• Responding to lawful requests from public authorities
• Establishing, exercising, or defending legal claims
• Protecting the rights, property, and safety of EdgeIcons, our users, and the public

3.6 Business Operations

• Managing our business operations and internal administration
• Conducting audits and financial reporting
• Planning and forecasting
• Facilitating corporate transactions (mergers, acquisitions, asset sales)

3.7 Aggregated and De-Identified Data

We may create aggregated, anonymized, or de-identified data from the information we collect. Such data does not identify you personally and may be used for any purpose, including research, analytics, improving our AI models, and marketing.

4. Legal Bases for Processing (For Users in Applicable Jurisdictions)

If you are located in a jurisdiction that requires a legal basis for processing personal information (such as the European Economic Area, United Kingdom, or certain Canadian provinces), we rely on the following legal bases:

4.1 Performance of Contract

Processing necessary to perform our contract with you, including:

• Providing the Service and fulfilling your requests
• Managing your account and subscription
• Processing payments

4.2 Legitimate Interests

Processing necessary for our legitimate interests, provided these are not overridden by your rights, including:

• Improving and developing the Service
• Ensuring security and preventing fraud
• Marketing our products and services (where permitted)
• Conducting analytics and research

4.3 Consent

Processing based on your explicit consent, including:

• Sending promotional communications (where consent is required)
• Placing non-essential cookies
• Processing sensitive personal information (if applicable)

You may withdraw consent at any time by contacting us or using the mechanisms provided.

4.4 Legal Obligations

Processing necessary to comply with our legal obligations, including:

• Tax and accounting requirements
• Responding to lawful government requests
• Complying with court orders

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party vendors, contractors, and service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers (e.g., data storage, computing)
• Payment processors (e.g., credit card processing, billing)
• Analytics providers (e.g., usage analysis, performance monitoring)
• Email and communication services (e.g., transactional emails, notifications)
• Customer support platforms (e.g., help desk, ticketing systems)
• Security services (e.g., fraud detection, threat monitoring)

Our service providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.

5.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of assets, or transition of service to another provider, your information may be transferred as part of such transaction. We will notify you of any such change in ownership or control of your personal information.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• Court orders, subpoenas, or other legal processes
• Requests from law enforcement or government agencies
• Regulatory inquiries and investigations

5.4 Protection of Rights

We may disclose your information where we believe it is necessary to:

• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of EdgeIcons, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Respond to claims that content violates the rights of third parties

5.5 With Your Consent

We may share your information for other purposes with your consent or at your direction.

5.6 Aggregated or De-Identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

6. International Data Transfers

Verus Software Inc. is based in Canada. Your information may be transferred to, stored, and processed in Canada and other countries where we or our service providers operate.

6.1 Transfers from the European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, we will ensure that transfers of your personal information to countries outside these regions are protected by appropriate safeguards, including:

• Transfers to countries deemed to provide an adequate level of data protection by the European Commission or relevant authority
• Standard Contractual Clauses approved by the European Commission
• Other valid transfer mechanisms under applicable law

Canada has been recognized by the European Commission as providing an adequate level of data protection for commercial organizations subject to PIPEDA.

6.2 Your Consent to Transfer

By using the Service, you acknowledge and consent to the transfer of your information to Canada and other jurisdictions as described in this Privacy Policy.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

7.1 Retention Periods

• Account Information: Retained for the duration of your account and for a reasonable period thereafter (typically up to 3 years) to comply with legal obligations and resolve disputes.
• Transaction and Billing Records: Retained for 7 years to comply with tax and accounting requirements.
• API Logs and Usage Data: Retained for up to 2 years for analytics, security, and service improvement purposes.
• Prompts and Generation History: Retained for up to 90 days for troubleshooting and service improvement, unless you request earlier deletion.
• Communications: Retained for as long as necessary to resolve inquiries and for a reasonable period thereafter.
• Marketing Preferences: Retained until you opt out or request deletion.

7.2 Deletion

When personal information is no longer required, we will securely delete or anonymize it. In some cases, we may retain certain information in anonymized or aggregated form where it no longer identifies you.

7.3 Backup Retention

Information in backups may be retained for longer periods for disaster recovery purposes but will be deleted in accordance with our backup retention schedules.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

8.1 Security Measures

Our security measures include:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Access Controls: Role-based access controls and authentication requirements
• Infrastructure Security: Secure cloud infrastructure with industry-standard protections
• Monitoring: Continuous monitoring for security threats and anomalies
• Employee Training: Security awareness training for personnel
• Vendor Security: Security requirements for third-party service providers
• Incident Response: Procedures for detecting, reporting, and responding to security incidents

8.2 API Credential Security

You are responsible for maintaining the confidentiality and security of your API credentials. Do not share your API keys or embed them in publicly accessible code.

8.3 No Guarantee

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

8.4 Security Incidents

In the event of a security breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

9. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information.

9.1 Rights Under Canadian Privacy Law (PIPEDA and Provincial Laws)

If you are a Canadian resident, you have the right to:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Withdraw Consent: Withdraw consent to the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner

9.2 Rights Under the EU General Data Protection Regulation (GDPR)

If you are located in the EEA or UK, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request restriction of processing of your personal data
• Data Portability: Receive your personal data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Complaint: Lodge a complaint with a supervisory authority

9.3 Rights Under California Privacy Laws (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know: Request information about the categories and specific pieces of personal information we have collected, the sources, purposes, and categories of third parties with whom we share it
• Delete: Request deletion of your personal information
• Correct: Request correction of inaccurate personal information
• Opt-Out of Sale/Sharing: We do not sell personal information or share it for cross-context behavioral advertising
• Non-Discrimination: Not be discriminated against for exercising your privacy rights
• Limit Use of Sensitive Personal Information: Request limits on the use of sensitive personal information (if applicable)

California "Shine the Light" Law: California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

9.4 Exercising Your Rights

To exercise any of these rights, please contact us at:

• Email: hi@edgeicons.com
• Address: 3rd Floor - 422 Richards St, Vancouver BC V6B 2Z4, Canada

We will respond to your request within the timeframes required by applicable law (generally within 30 days, or 45 days for CCPA requests). We may need to verify your identity before processing your request.

9.5 Authorized Agents

You may designate an authorized agent to make requests on your behalf. We may require verification of the agent's authority and your identity.

9.6 Appeals

If we decline to take action on your request, you may appeal by contacting us. We will respond to appeals within the timeframes required by applicable law.

10. Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function, remember your preferences, and provide analytics data.

10.2 Types of Cookies We Use

10.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View cookies stored on your device
• Delete cookies individually or in bulk
• Block all cookies or certain types of cookies
• Set preferences for certain websites

Please note that blocking or deleting cookies may affect the functionality of the Service.

10.4 Do Not Track

Some browsers offer a "Do Not Track" (DNT) feature. We currently do not respond to DNT signals, as there is no industry-standard interpretation of DNT.

10.5 Web Beacons and Pixels

We may use web beacons (also known as "pixel tags" or "clear GIFs") in our emails and on our website to track engagement and gather analytics data.

11. Third-Party Links and Services

The Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party services you access through or in connection with the Service.

12. Children's Privacy

The Service is not intended for children under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us at hi@edgeicons.com.

13. AI-Generated Content and Data Use

13.1 Prompts and Inputs

When you use the Service, you submit prompts and inputs to generate icons. We may retain these prompts temporarily for:

• Processing your request and generating outputs
• Troubleshooting and customer support
• Improving the Service and our AI models

13.2 Generated Icons

Icons generated through the Service are created by our AI models based on your inputs. We do not claim ownership of the icons generated for you, subject to the licensing terms in our Terms of Service.

13.3 Model Training

We may use de-identified or aggregated data derived from the Service to improve our AI models. We do not use your specific prompts or personal information to train AI models without your consent.

13.4 Automated Decision-Making

The Service uses AI and automated systems to generate icons based on your inputs. This processing is essential to providing the Service. You have the right to request human review of automated decisions that significantly affect you, where required by applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

14.1 Notification of Changes

If we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on our website
• Updating the "Effective Date" at the top of this policy
• Sending an email notification to the address associated with your account (for material changes)
• Displaying a notice within the Service

14.2 Review and Acceptance

Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

14.3 Prior Versions

Prior versions of this Privacy Policy are available upon request.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us at:

15.1 Privacy Officer

For privacy-related inquiries, you may also contact our Privacy Officer at the address above.

15.2 Regulatory Authorities

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the applicable privacy regulator:

16. Additional Information for Specific Jurisdictions

16.1 California Residents

Categories of Personal Information Collected: In the preceding 12 months, we have collected the categories of personal information described in Section 2 of this Privacy Policy, including identifiers, commercial information, internet activity, geolocation data, and inferences.

Sources: We collect personal information from the sources described in Section 2.

Purposes: We use personal information for the business and commercial purposes described in Section 3.

Disclosure: We may disclose personal information to the categories of third parties described in Section 5 for business purposes.

Sale/Sharing: We do not sell personal information or share it for cross-context behavioral advertising as defined under California law.

Retention: We retain personal information as described in Section 7.

Financial Incentives: We do not offer financial incentives related to the collection of personal information.

16.2 Nevada Residents

We do not sell your covered information as defined under Nevada law. If you wish to submit a request relating to the sale of covered information, please contact us at hi@edgeicons.com.

16.3 Virginia, Colorado, Connecticut, and Other U.S. State Residents

Residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, and others) may have similar rights to those described in Section 9. Please contact us to exercise your rights under applicable state law.

16.4 Quebec Residents

If you are a resident of Quebec, additional provisions under Quebec's Act Respecting the Protection of Personal Information in the Private Sector and Law 25 may apply to the processing of your personal information. You may exercise your rights by contacting us as described in Section 15.