Terms of Service & Privacy Policy

1. Acceptance of Terms

By accessing or using Iterel ("the Service"), operated by Iterel ("we," "us," or "our"), you agree to be bound by these Terms of Service. If you do not agree, please do not use the Service.

We may update these Terms from time to time. Continued use of the Service after changes constitutes acceptance of the updated Terms. We will notify registered users of material changes via email.

2. Description of Service

Iterel is an AI-powered product creation studio that provides tools for research, strategy, creative direction, user flow mapping, visual design, and code generation. The Service uses artificial intelligence models to assist users in creating digital products.

AI-generated outputs are provided as suggestions and starting points. You are responsible for reviewing, validating, and adapting all generated content before use in production environments.

3. User Accounts

You must create an account to use the Service. You agree to:

• Provide accurate and current registration information
• Maintain the security of your password and account credentials
• Notify us immediately of any unauthorized access to your account
• Accept responsibility for all activities that occur under your account

You must be at least 18 years old or the age of legal majority in your jurisdiction to use the Service.

4. Acceptable Use

You agree not to use the Service to:

• Violate any applicable laws, regulations, or third-party rights
• Generate content that is illegal, harmful, defamatory, or infringes on intellectual property rights
• Attempt to reverse-engineer, decompile, or extract the underlying AI models or algorithms
• Interfere with or disrupt the Service or its infrastructure
• Use automated means (bots, scrapers) to access the Service without prior written consent
• Share your account credentials or allow unauthorized access
• Circumvent usage limits, credit systems, or access controls

5. Intellectual Property

Your Content

You retain ownership of all content you create using the Service, including designs, code, research outputs, and strategic documents. You grant us a limited license to process your content solely to provide the Service.

Our Content

The Service, including its software, UI design, documentation, and branding, is owned by Iterel and protected by intellectual property laws. You may not copy, modify, or distribute any part of the Service without written permission.

AI-Generated Content

Content generated by AI through the Service is provided for your use. You are responsible for ensuring that any AI-generated content you use does not infringe on third-party rights. We do not claim ownership of AI-generated outputs produced for you.

6. Credits and Billing

The Service operates on a credit-based billing system. Credits are consumed when AI-powered features are used (research generation, design creation, code generation, etc.).

• Credit costs vary by operation type and complexity
• Subscription plans include a monthly credit allowance that resets each billing cycle
• Additional credits can be purchased as one-time top-up packs
• Unused subscription credits do not roll over to the next billing cycle
• Credits from top-up packs do not expire
• Refunds for unused credits are handled on a case-by-case basis

Billing is processed securely through Stripe. By subscribing, you authorize recurring charges according to your chosen plan. You may cancel your subscription at any time through your account settings or the Stripe billing portal.

7. Service Availability

We strive to maintain high availability but do not guarantee uninterrupted access. The Service may be temporarily unavailable due to maintenance, updates, or circumstances beyond our control. We will make reasonable efforts to notify users of planned downtime.

8. Limitation of Liability

To the maximum extent permitted by law, Iterel shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities, arising from your use of the Service.

Our total liability for any claims related to the Service shall not exceed the amount you paid us in the twelve (12) months preceding the claim.

9. Termination

You may delete your account at any time through the Settings panel. We may suspend or terminate your account if you violate these Terms, with or without notice.

Upon termination, your right to use the Service ceases immediately. We will delete your data in accordance with our data retention policy and applicable law.

10. Information We Collect

Account Information

When you create an account, we collect your email address, name (if provided), and authentication credentials. If you sign in via a third-party provider (Google, GitHub, Microsoft), we receive your profile information from that provider.

Usage Data

We collect anonymized analytics about how you use the Service, including features used, session duration, and error reports. This helps us improve the product.

Project Content

The content you create within your projects (research data, designs, code, etc.) is stored to provide the Service. We do not access your project content except as necessary to operate, maintain, or improve the Service, or as required by law.

11. How We Use Your Information

• To provide, maintain, and improve the Service
• To process transactions and manage your account
• To send transactional emails (account verification, password resets, billing notifications)
• To send product updates and announcements (with your consent; you may opt out at any time)
• To monitor and prevent fraud, abuse, and security threats
• To comply with legal obligations

We do not sell your personal information to third parties. We do not use your project content to train AI models.

12. Third-Party Services

The Service integrates with the following categories of third-party providers:

• AI Model Providers — To generate content (text, designs, code). Your prompts and project context may be sent to these providers for processing.
• Payment Processing — Stripe handles all billing securely. We do not store your credit card information.
• Analytics — Amplitude for product analytics, Datadog for infrastructure monitoring, Sentry for error tracking.
• Email — Resend for transactional email delivery.
• Authentication — Supabase Auth for secure user authentication.
• Hosting — Vercel for application hosting and CDN.

Each third-party provider is bound by their own privacy policies and data processing agreements.

13. Data Security

We implement industry-standard security measures to protect your data, including:

• TLS encryption for all data in transit
• Row-Level Security (RLS) on all database tables
• Secure authentication with session management
• Regular security audits and monitoring
• Principle of least privilege for internal access

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

14. Cookies

We use cookies and similar technologies for:

• Essential cookies — Required for authentication and core functionality
• Analytics cookies — To understand usage patterns (requires your consent)
• Preference cookies — To remember your settings (theme, language)

You can manage your cookie preferences at any time using the Cookie Settings link in the footer of our website.

15. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — Request a copy of the personal data we hold about you
• Rectification — Correct inaccurate personal data
• Deletion — Request deletion of your personal data and account
• Portability — Export your data in a machine-readable format (available via Settings)
• Objection — Object to processing of your personal data for specific purposes
• Restriction — Request restriction of processing in certain circumstances

To exercise these rights, use the built-in tools in Settings or contact us at the address below. We will respond within 30 days.

16. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will remove your personal data and project content within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, billing records).

17. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required by applicable data protection laws.

18. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will promptly delete it.