Privacy Policy

Last updated: March 11, 2026

At Graviton, your privacy is fundamental to how we build and operate our service. This Privacy Policy explains what information we collect, how we use it, and the choices you have. Graviton is an image compression and format conversion tool available at www.gravitonimages.com.

1. Information We Collect

Account Information

When you create an account with Graviton, we collect the following information through our authentication provider, Clerk:

• Email address
• Name
• Profile picture

This information is provided by you during sign-up or imported from your connected authentication provider (e.g., Google, GitHub, Apple) through Clerk.

Usage Data

We collect usage data to manage your account and enforce plan limits. This includes:

• Number of compressions performed
• Your subscription plan type (Free, Starter, or Pro)
• Daily usage count
• Compression metadata (file size before and after, format, compression ratio)

Automatically Collected Information

When you visit Graviton, Vercel Analytics may automatically collect basic, anonymized analytics data such as page views, referrer information, and general geographic region. This data is aggregated and cannot be used to identify individual users.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain the Graviton image compression service
• To manage your account, authentication, and subscription plan
• To enforce daily compression limits based on your plan tier
• To track compression history and provide usage statistics
• To communicate with you about service updates or support requests
• To improve the quality and performance of our service

We do not sell, rent, or share your personal information with advertisers or data brokers. We do not use your data for targeted advertising.

3. Image Processing & Privacy

This is the most important section of our privacy policy. Graviton is designed with a privacy-first approach to image handling:

• In-memory processing only: Your images are processed entirely in server memory using streaming. They are never written to disk.
• No storage: We do not store your original or compressed images on any server, database, or cloud storage service. Images exist only in memory for the duration of the compression operation.
• Immediate disposal: Once compression is complete and the result is delivered to your browser, the image data is immediately discarded from server memory.
• No access: No Graviton employee, system, or third party has access to your images at any point during or after processing.
• No training: Your images are never used for machine learning, AI training, analytics, or any purpose other than the compression you requested.

The maximum file size we accept is 50MB per image. Supported formats include JPG, PNG, WebP, AVIF, and GIF.

4. Third-Party Services

Graviton relies on the following third-party services to operate. Each has its own privacy policy that governs how they handle data:

• Clerk (authentication and user management) — Clerk Privacy Policy
• Convex (real-time database for usage data and settings) — Convex Privacy Policy
• Vercel (hosting and analytics) — Vercel Privacy Policy

We do not share your images with any of these services. Clerk handles your authentication credentials. Convex stores your account settings, plan information, and compression metadata (not images). Vercel hosts the application and provides anonymized analytics.

5. Cookies & Tracking

Graviton uses a minimal set of cookies, strictly necessary for the operation of the service:

• Clerk session cookies: Used to maintain your authenticated session. These are essential for the service to function and cannot be disabled while using an account.
• Vercel Analytics: Collects anonymized, aggregated usage data (page views, performance metrics). No personally identifiable information is collected through analytics.

We do not use tracking pixels, advertising cookies, remarketing tags, or any form of cross-site tracking. We do not participate in any advertising networks.

6. Data Retention

We retain different types of data for different periods:

• Account data: Retained for as long as your account is active. You can request deletion at any time.
• Compression metadata: Usage statistics and compression history are retained while your account is active and periodically cleaned up (only recent records are kept).
• Images: Not retained at all. Images exist only in server memory during processing and are immediately discarded.

7. Data Security

We take reasonable measures to protect your information:

• All data is transmitted over HTTPS/TLS encryption
• Authentication is handled by Clerk, a SOC 2 compliant provider
• Images are never persisted to disk, eliminating the risk of stored image data breaches
• Database access is secured through Convex's authentication layer
• The application is hosted on Vercel's secure infrastructure

While no method of electronic transmission or storage is 100% secure, our architecture minimizes risk by design — particularly by never storing your images.

8. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

Under GDPR (European Economic Area)

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing of your personal data

Under CCPA (California)

• Right to know: Request disclosure of what personal information we collect and how it is used
• Right to delete: Request deletion of your personal information
• Right to opt-out: We do not sell personal information, so this right is automatically satisfied
• Right to non-discrimination: We will not discriminate against you for exercising your rights

To exercise any of these rights, please contact us at support@gravitonimages.com. We will respond to your request within 30 days.

9. Children's Privacy

Graviton is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@gravitonimages.com and we will promptly delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of Graviton after changes constitutes acceptance of the updated policy.