Privacy Policy

Last updated: November 4, 2026

This policy explains how Verba Inc. ("we", "us") collects, uses and protects personal information when you use Blank Builder at blankbuilder.app (the "Service"). We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies to you, the EU/UK General Data Protection Regulation (GDPR) and other local privacy laws.

1. Information we collect

Account information. Your email address, and your name if you provide it. If you sign in with Google or another provider, we receive the basic profile information that provider shares.

Your content. The projects you save, the artwork, images and text you upload, the cloud renders we make for you, and the results of Vectorize and Upscale.

Subscription information. Your plan, subscription status, billing period and a customer reference from our payment provider. We do not receive or store your full card details. Payments are handled by Paddle.

Usage information. How you use the Service, for example how many exports you make and when, along with device, browser and log information such as IP address. We use it to run the Service, enforce plan limits, prevent abuse and fix problems.

Communications. Messages you send us, for example support requests.

Feedback. If you use the feedback form, we keep your message, the type you chose, your email if you give it (or your account email if you are signed in), the app version, your browser's description (user agent) and a one-way hash of your IP address that we use only to stop spam.

2. How we use your information

We use your information to:

• provide the Service, including saving your projects, generating previews and exports, and enforcing plan limits;
• process subscriptions and payments (through Paddle);
• send you service messages such as receipts, renewal reminders, security notices and notices about data deletion;
• send you a few short emails when you start: a welcome email with the first steps, one reminder if you have not made a design after a couple of days, and a one-time notice when you have used the free exports on the Free plan;
• provide support;
• keep the Service secure and prevent fraud and abuse;
• improve the Service; and
• meet our legal obligations.

Tips and product news (for example, what a paid plan adds) are sent only if you tick "Send me tips and product news" when you sign up. The box is not ticked for you.

Unsubscribing. Every one of these emails has an Unsubscribe link: one click stops all welcome emails, reminders, tips and product news, and you can subscribe again on the same page. Emails you need for your account, such as sign-in links, security notices, receipts and notices about your plan or your files, still come when needed. You can also write to [email protected].

We do not sell your personal information. We do not use your uploaded artwork to train AI models.

Where GDPR applies, our legal bases are:

• performing our contract with you: providing the Service;
• legitimate interests: security, abuse prevention, improving the Service, and the short emails that help you start using it (which you can stop with one click);
• consent: tips and product news, and non-essential cookies;
• legal obligation: for example tax and accounting records.

3. Who we share information with

We share personal information only with service providers that help us run the Service, and only as needed:

Paddle processes payment information as an independent controller under its own privacy policy (paddle.com/legal/privacy).

We may also disclose information if the law requires it, to protect our rights or users' safety, or as part of a merger or sale of our business. If that happens, the new owner must keep following this policy.

4. International transfers

Our main database is in Canada. Some providers process data in other countries, including the United States, the United Kingdom and the EU. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

5. How long we keep information

• Account, projects, artwork and cloud renders: while your account is active and within your plan's storage space.
• After a paid plan ends: 30 days, then everything beyond what the Free plan keeps is deleted (all cloud renders and all projects except the one you opened most recently). The date is shown in the Service.
• Vectorize and Upscale results: while your account is active, so the same picture is free next time.
• Renders saved to your device only: kept on our servers for 24 hours so you can download them.
• Inactive Free accounts: saved projects and uploaded files may be deleted after 90 days without sign-in.
• Feedback messages: until we have dealt with them, and no longer than 2 years.
• Email records: which of our emails we sent you and when, your choice about tips and news, and whether you unsubscribed: while your account exists (so we never send the same email twice or email you after you unsubscribed).
• After you delete your account: we delete your projects and files within 30 days. Backups are deleted within a further 30 days.
• Billing and tax records: kept as long as tax and accounting laws require, usually up to 7 years.

6. Security

We protect your information with these measures:

• encryption in transit (HTTPS);
• access controls so each user can only access their own projects and files;
• private file storage;
• restricted administrative access.

No system is perfectly secure. If a breach affects your personal information and creates a real risk of significant harm, we will notify you as the law requires.

7. Cookies

We use cookies and similar browser storage that are needed to keep you signed in and to make the Service work, for example to remember your settings and a cloud render that is still running. If you allow it, your browser shows a notification when a cloud render is ready; you can turn this off in your browser at any time. We also use Google Analytics to understand how people find and use the Service: pages visited, the device and browser, the approximate country, and actions such as signing up, opening checkout and buying a plan. It uses cookies and a random identifier, not your name or email, and Google does not store your full IP address. We use it to improve the Service and to measure our advertising. We also use the Meta Pixel to measure our ads on Facebook and Instagram: it tells Meta when someone who saw or clicked our ad visits the Service, signs up or buys a plan, so we can see which ads work and show them to people who are more likely to be interested. When you sign up, the pixel also sends Meta a scrambled (hashed) copy of your email address and your country, so Meta can match the sign-up to the ad you saw; it never sends your password. When you buy a plan or a credit pack, our server also tells Meta about the purchase (Meta Conversions API), so it is counted once even if your browser blocks the pixel: the amount and currency, an order number, a scrambled (hashed) copy of your email address and of your account ID, Meta's cookie identifiers if your browser has them, and your browser type. We do this only when the Meta Pixel is allowed for you. Meta may combine this with information it has about you under its own privacy policy (facebook.com/privacy/policy).

Your choice. Wherever you are, analytics and advertising cookies stay off until you click Allow in our cookie banner. You can change your choice at any time with Cookie settings at the bottom of our pages. If you decline, the Service works the same, the Meta Pixel does not load at all, and our server does not tell Meta about your purchases.

8. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct it;
• delete it;
• receive a copy in a portable format;
• object to or restrict certain processing; and
• withdraw your consent.

To use any of these rights, email [email protected]. You can also delete your account yourself in My account.

You also have the right to complain to a privacy regulator:

• in Canada, the Office of the Privacy Commissioner of Canada;
• in the EU/UK, your local data protection authority.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

10. Changes

We may update this policy. If a change is material, we will notify you by email or in the Service before it takes effect.

11. Contact

Verba Inc. Toronto, Ontario, Canada Privacy questions: [email protected] General support: [email protected]