Privacy Policy

DesignLayer is operated by 藤吉 祥太郎, a sole proprietor in Japan (“we”, “the service”). We handle personal information in line with applicable law, including Japan’s Act on the Protection of Personal Information. This policy explains how we collect and use that information.

The personal information handling business operator is identified below. To request disclosure of the address, use the contact details.

We may collect:

• Account details (email, display name, authentication data)
• Usage data (catalog browsing, Copy for Cursor, waitlist sign-ups, operational logs)
• Billing data when you subscribe (card numbers are processed by our payment provider, not stored by us)
• Technical data (IP address, browser, device, essential cookies, error logs)
• Support messages and Designengine waitlist emails

We use this information to:

• Provide the catalog, live previews, Copy for Cursor, and account management
• Enforce the free daily copy quota and process Pro subscriptions
• Respond to waitlist sign-ups and support requests
• Improve the service and measure traffic (in the EEA, UK, and Switzerland, analytics runs only after consent)
• Prevent abuse, keep the service secure, and handle outages
• Send essential notices about the service, terms, or maintenance
• Comply with law

We do not sell personal information. We share it only when required by law, to protect vital interests, or with processors who help us run the service:

• Hosting (Vercel)
• Infrastructure, database, and auth (Supabase)
• Payment processing (Stripe)
• Google Sign-In and Google Analytics (after consent in the EEA, UK, and Switzerland)
• Email delivery (Resend)
• Operator alerts (Discord)

Destinations, purposes, and data items are listed on the External transmissions page.

The processors above are located outside Japan (mainly the United States; Stripe may also process in Ireland). Personal data may therefore be provided to third parties in foreign countries, including as entrusted processing.

Information on each country’s personal-information protection system is published by Japan’s Personal Information Protection Commission: https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku . We supervise processors through contracts, access control, and encryption in transit. Each vendor handles data under its own privacy policy and data-processing terms.

Transfers needed to log in, take payment, or send email are made to perform the service. Google Analytics runs after you consent on the site if you visit from the EEA, UK, or Switzerland. From other regions it runs for audience measurement and product improvement.

We use essential cookies to keep you signed in, identify the free copy quota, and protect the service. These are required for the product to work.

Analytics cookies (Google Analytics) load only after you accept the consent banner if you visit from the EEA, UK, or Switzerland. From other regions they load for audience measurement and product improvement. Blocking all cookies in the browser may break login or copy limits.

Under Japan’s Telecommunications Business Act (external transmission rules), we publish destinations, purposes, and items sent from your device on /transmissions.

We keep personal information only as long as needed for the purposes above or as required by law, then delete or anonymize it.

We use reasonable measures such as access control, encryption in transit, and vendor oversight to reduce the risk of unauthorized access, loss, or alteration.

You may request access, correction, deletion, or restriction of your personal information. We will verify identity and respond as required by law. Contact us using the details below.

If you are a minor, use the service only with a parent or guardian’s consent.

We may update this policy when the product or the law changes. Material changes will be announced on the site.

Questions, access requests, or complaints about privacy: use the contact form or email support@design-layer.com.