Privacy Policy

Vectopus FZ-LLC, trading as GetIllustrations ("we", "us", or "our"), operates getillustrations.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use any of our products and services, including the Figma plugin, REST API, custom illustration tools, and design utilities (collectively, the "Service").

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service. By accessing or using the Service you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Information We Collect

(a) Personal Information You Provide

We collect personal information that you voluntarily provide when you register for an account, make a purchase, contact our support team, subscribe to our newsletter, or otherwise interact with the Service. This may include:

• Full name and email address
• Billing name, company name, and country
• Payment details — processed securely by Paddle (our Merchant of Record); we do not store or access card numbers
• VAT or tax ID number (optional, for invoice purposes)
• Profile photo (optional)
• Communications you send us (support tickets, feedback, custom order briefs)

(b) Usage Data

When you access the Service, certain information is collected automatically by our servers and analytics tools, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, search queries, and time spent on pages
• Referring URLs and exit pages
• Device identifiers and screen resolution
• Cookie identifiers and session tokens

(c) Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience. For full details see our Cookie Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Fulfill orders, grant download access, and generate invoices
• Process payments securely via Paddle (our Merchant of Record)
• Send transactional emails (purchase confirmations, password resets)
• Improve our Service through usage analysis and A/B testing
• Personalise your experience and surface relevant content
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service
• Respond to support requests and communicate about your account

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our processing of your personal data rests on the following lawful bases under the General Data Protection Regulation (GDPR):

• Contractual necessity — Processing required to provide the Service you have signed up for, including account management, payment processing, and download access.
• Legitimate interests — Analytics, fraud prevention, product improvement, and direct marketing to existing customers, balanced against your rights.
• Consent — Marketing emails to new contacts, placement of non-essential cookies, and processing of any sensitive personal data. You may withdraw consent at any time without affecting prior lawful processing.
• Legal obligation — Retaining transaction records and tax documents as required by applicable law.

4. Sharing and Disclosure

We do NOT sell your personal information to third parties, ever. We share your information only in the following limited circumstances:

• Paddle (paddle.com) — Our Merchant of Record and payment processor for digital product purchases. Paddle receives your billing name, email address, billing country, and payment details to process transactions, manage subscriptions, handle tax compliance, and issue invoices. Paddle is PCI-DSS compliant and is subject to its own Privacy Policy. We do not store or access your full payment card details.
• Stripe and PayPal — Used to process payments for custom illustration services only. These providers are PCI-DSS compliant.
• Hosting and infrastructure providers — Amazon Web Services for file storage; our VPS provider for application hosting. These vendors are bound by data processing agreements.
• Analytics platforms — Google Analytics and similar tools receive anonymised or pseudonymised usage data to help us improve the Service.
• Email service providers — Transactional and marketing email delivery services (e.g., SendGrid, Mailchimp) receive your email address only to send communications on our behalf.
• Legal requirements — We may disclose information when required by law, court order, or governmental authority, or to protect our rights and safety.
• Business transfers — In the event of a merger or acquisition, your data may be transferred to the successor entity under the same privacy terms.

5. Data Retention

We retain your personal information for no longer than is necessary for the purposes described in this policy, or as required by law. Our default retention periods are:

6. Your Rights

Depending on your location, you may have the following rights with respect to your personal data. To exercise any of these rights, contact us at privacy@getillustrations.com. We will respond to verified requests within 30 days.

• Right of Access — Request a copy of the personal data we hold about you.
• Right to Rectification — Request correction of inaccurate or incomplete data. You can also update most information in your account settings.
• Right to Erasure ("Right to be Forgotten") — Request deletion of your personal data, subject to legal retention obligations.
• Right to Restriction of Processing — Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability — Receive your personal data in a structured, machine-readable format.
• Right to Object — Object to processing based on our legitimate interests, including direct marketing.
• Right to Withdraw Consent — Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

EEA and UK residents also have the right to lodge a complaint with their local data protection supervisory authority. We may ask you to verify your identity before acting on a request.

7. Security Measures

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction:

• SSL/TLS encryption for all data in transit
• Encrypted storage of passwords using bcrypt hashing
• Access controls limited to authorised personnel on a need-to-know basis
• Regular security reviews and vulnerability assessments
• Encrypted S3 storage for all uploaded files and assets

No method of transmission over the Internet is 100% secure. In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant supervisory authorities as required by applicable law.

8. International Data Transfers

GetIllustrations operates globally. Your personal data may be transferred to and processed in countries outside your country of residence, including the United States, where data protection laws may differ from those in your jurisdiction.

When we transfer personal data from the EEA or UK to third countries, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms. You may request a copy of the relevant safeguards by contacting privacy@getillustrations.com.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are under 16, please do not register for an account or submit any personal information through the Service.

If we learn that we have collected personal information from a child under 16 without verifiable parental consent, we will delete that information promptly. If you believe we may have collected information from a child under 16, please contact us at privacy@getillustrations.com.

10. Third-Party Links

The Service may contain links to third-party websites, plugins, or services not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every website you visit.

11. CCPA Compliance

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information. The categories of personal information we collect include identifiers (name, email, IP address), commercial information (purchase history), and internet activity (browsing behaviour on our site).

• Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, business purpose, and categories of third parties with whom we share it.
• Right to Delete — Request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale — We do not sell your personal information as defined under the CCPA.
• Right to Non-Discrimination — We will not discriminate against you for exercising any CCPA rights.

To submit a CCPA request, contact us at privacy@getillustrations.com. We will verify your identity before processing the request.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and notify you by email or by displaying a prominent notice on the Service.

Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to us:

• Email: hello@getillustrations.com
• Company: Vectopus FZ-LLC (trading as GetIllustrations)
• License No: 17002054 / 17002055
• Address: Compass Building, Al Shohada Road, AL Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates

We aim to respond to all privacy-related enquiries within 5 business days and to fulfil verified data subject requests within 30 days.