Privacy Policy

1. Who Operates iShaper

iShaper is operated by Ryan Kotzebue. If you have privacy questions or want to make a privacy-related request, email hello@ishaper.surf.

2. Information iShaper Collects

Depending on how you use the service, iShaper may collect:

• account details such as your name, email address, and optional profile image;
• authentication and session records, including session tokens, IP address, and user agent;
• organization data such as organization names, slugs, roles, invitations, and membership records;
• board content such as board names, design snapshots, published versions, notes, and visibility settings;
• billing-related metadata such as Stripe customer IDs, subscription IDs, plan information, and billing status;
• preferences and technical data such as cookie-based UI state and export preferences you save in the app.

3. How iShaper Uses Information

iShaper uses information to:

• create and manage accounts and organizations;
• authenticate users and secure sessions;
• store, render, export, and share board designs;
• process subscriptions and manage billing status;
• respond to support requests and service issues;
• maintain, protect, and improve the service.

4. Public Sharing and Remixes

If you make a board public, it may be shown in public areas of iShaper, made available through a share link, and referenced from print exports that include QR codes.

Public boards can also be remixed by other signed-in users. When that happens, the selected public version is copied into the other user's private workspace. Public boards should therefore be treated as content you are comfortable making visible to others.

5. Reference Photos in the Editor

iShaper includes a reference photo workflow in the editor. This feature does not upload the selected reference photo to iShaper's servers as part of the current workflow.

6. Cookies and Similar Storage

iShaper uses cookies and similar storage for essential service functions such as authentication, organization context, and basic interface preferences like sidebar state. The service may also store preferences associated with your account, such as export settings.

7. When Information Is Shared

iShaper may share information in the following situations:

• with Google when you use Google sign-in;
• with Stripe when subscriptions or billing features are used;
• with hosting, database, infrastructure, or technical service providers that help operate iShaper;
• when content is intentionally made public by you through public board features;
• when disclosure is reasonably necessary to comply with law, protect rights, or prevent abuse.

iShaper does not sell your personal information.

8. Data Retention

Information is generally retained for as long as needed to provide the service, maintain workspace records, meet legal or accounting obligations, resolve disputes, and enforce terms. If you request deletion, some information may be retained as reasonably necessary for those purposes.

9. International Users

iShaper is operated from the United States. If you use the service from another country, you understand that your information may be transferred to and processed in the United States or other countries where service providers operate. Those countries may have data protection rules different from those in your location.

10. Your Choices and Requests

You can contact hello@ishaper.surf to request access to, correction of, or deletion of your personal information. I may need to verify your request and may limit or decline requests where the law allows or where operational, security, billing, or recordkeeping needs make that necessary.

11. Security

I use reasonable measures intended to protect iShaper and the information it stores. No method of transmission or storage is completely secure, and I cannot guarantee absolute security.

12. Children's Privacy

iShaper is not directed to children under 13, and I do not intend to knowingly collect personal information from children under 13 through the service. If a younger surfer wants to use iShaper, a parent or guardian should create and supervise the account.

13. Changes to This Policy

I may update this Privacy Policy from time to time. If I make a material change, I may update the effective date above and take other reasonable steps to let users know when appropriate.