Back

Privacy statement

Last updated: 4 November 2026

1. Who are we?

ClaudeInDesign.com is a product of Superworkx B.V., trading as Social Roots. We are responsible for the processing of personal data through ClaudeInDesign.com.

Company
Superworkx B.V., trading as Social Roots
Address
Bruistensingel 500, 5232 AH 's-Hertogenbosch, the Netherlands
KvK
27252119
VAT
NL811020034B02

2. Which data do we process?

We only process what is needed to run ClaudeInDesign.com:

  • Account details: your email address and, if you use one, your password in encrypted form.
  • Export metadata: project name, file name, date, status, document size and number of warnings per export, plus the step and error message when a conversion fails.
  • Payment details: subscription status and transaction data via Stripe. We never see or store full card numbers.
  • Contact form: name, email address and your message.
  • Abuse prevention: a hashed fingerprint of your browser and a hashed IP address, only when you use the free export.

Your design files, images and fonts are never sent to or stored on our servers. Analysis and conversion happen in your own browser.

3. Why do we process this data?

To perform our agreement with you (account, exports, subscription), for our legitimate interests (security, troubleshooting, preventing abuse of the free export) and to meet legal obligations such as tax record keeping.

4. Retention periods

  • Design files and assets: never stored; processing happens in your browser.
  • Account details and export metadata: until 3 months after your subscription ends or your account is closed. You can delete export metadata earlier yourself under Projects.
  • Invoices and payment details: 7 years, as required by Dutch tax law.
  • Logs and error reports: 90 days.
  • Hashed fingerprint and IP hash for abuse prevention: 30 days.
  • Contact form messages: as long as needed to handle your question, at most 12 months.

5. Sharing with third parties

We only share data with parties needed for the service. With each of them we have a data processing agreement or appropriate safeguards such as standard contractual clauses.

  • Stripe: payments and subscriptions.
  • Supabase via Lovable Cloud: database, sign-in and hosting.
  • Resend: sending emails such as confirmation links.
  • Sentry: technical error reports, without personal data or file contents.
  • Roots: cookie banner and statistics, only with your consent.

6. Cookies

Functional cookies and local storage are needed to sign in and remember your language; we always set those. Statistics cookies are only set with your consent through the cookie banner. See our cookie page for details.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Send your request to our email address above; we respond within 30 days.

If you disagree with how we handled it, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

8. Security

We take appropriate technical and organisational measures, including encrypted connections, per-user access rules in the database, hashed fingerprints and never storing design files.

9. Changes

We may update this privacy statement. The latest version is always on this page.