1. Data We Collect & Process
CloudSketch AI operates under strict data minimization principles. We collect only the data necessary to translate text descriptions into interactive C4 architecture diagrams, enforce daily limits, and support subscriptions.
Diagram Prompts
Natural language descriptions entered into the editor to generate diagrams.
Anonymous Client Identifiers
Randomly generated local browser UUIDs used to associate session state.
Payment Metadata
Subscription status, transaction IDs, and plan entitlements via Razorpay.
Operational Telemetry
Route paths, error codes, and generation execution timestamps for service reliability.
2. Privacy-Preserving Cryptographic Rate-Limiting
To enforce our 3-generation daily free limit fairly without forcing users to create accounts or tracking them across private browser windows, we utilize a server-side IP hashing architecture.
🔑 One-Way Cryptographic Hashing Protocol
When a request is received, the client's network IP address is combined with a random server-side salt and immediately transformed into an irreversible SHA-256 cryptographic hash. The original raw IP address is discarded instantly and is never written to disk or stored in our database.
3. Broad Geolocation Disclosures (GDPR / CCPA)
We resolve broad country and state/region details at request startup to support multi-currency pricing (INR, USD, EUR) and regional server routing.
Strict Exclusion: Precise geolocation data — including street addresses, GPS coordinates, neighborhood boundaries, city identifiers, and zip codes — is never requested, accessed, or stored.
4. How We Process Your Information
All collected data is processed strictly for legitimate operational purposes:
- Synthesizing architecture diagram code (Mermaid syntax) via AI models.
- Verifying free tier daily limits and Pro subscription access.
- Processing billing transactions, issuing tax receipts, and handling refund requests.
- Monitoring system performance, model accuracy, and platform uptime.
5. Third-Party Data Sharing & Sub-Processors
We do not sell, rent, or trade your data to advertisers or third parties.
Data is shared only with trusted infrastructure providers required to operate our service:
Razorpay Payments
Secure payment processing, webhook verification, and subscription management.
Google Gemini API
Generative AI model execution for architecture diagram code synthesis. Your prompt text is sent to Google to generate the diagram.
Google Analytics 4 (only if you accept)
Counts visits and page views so we know which pages are useful. Runs only after you accept analytics cookies in the cookie banner.
Microsoft Clarity (only if you accept)
Shows how the site is used through click maps and anonymised session recordings. Not loaded at all unless you accept analytics cookies.
Google & GitHub sign-in
If you choose to sign in with Google or GitHub, they confirm your email address and name to us.
Hostinger
Hosts our website, application servers and database.
You can accept or reject analytics at any time from the Cookie Policy page. See it for the full list of cookies and browser storage we use.
6. Data Retention & User Rights
We retain operational logs and telemetry records only for as long as necessary to enforce usage quotas, satisfy accounting laws, and ensure platform security.
Right to Access
Request details on the telemetry data associated with your client session.
Right to Erasure
Request deletion of saved diagram snapshots and account metadata.
Data Security
All data in transit is encrypted using industry-standard TLS 1.3 encryption.
7. Contact Us Regarding Privacy
If you have questions, concerns, or requests regarding this Privacy Policy or your data rights, please reach out to our privacy team.
If you are in India, you have rights under the Digital Personal Data Protection Act, 2023, including the right to access, correct and erase your personal data, and to withdraw consent. For any privacy request or grievance, email support@cloudsketchai.com. We aim to respond within 30 days.