Privacy Policy
Our privacy policy and how we use your data
Effective date: September 9, 2026
Last reviewed: September 9, 2026
This Privacy Policy explains how Afterimage Inc. (Korean legal name: 주식회사 애프터이미지; “acrylic,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use the acrylic website, desktop application, accounts, support channels, and related services.
1. Scope
This Policy applies to personal information that acrylic controls. A third-party checkout, identity provider, AI provider, or integration may process information under its own privacy policy when you choose to use that service.
2. Local and cloud processing
acrylic offers two materially different ways to run AI tasks.
| Mode | Where the task runs | Network disclosure for AI processing |
|---|---|---|
| Local mode | A local model runs on your PC | Your document content and instructions are not sent to acrylic or an external AI provider for AI processing. Model downloads and updates may still create ordinary network records. |
| Cloud mode | A cloud model processes the task through the acrylic API | Your instructions and the document content, selected text, or attachments needed for the task are sent to acrylic, OpenRouter, and the selected model provider. |
Files and conversations stored on your device are not automatically uploaded to acrylic. They leave your device only when you choose a feature that requires transmission, such as cloud AI, sharing, or sending material to support.
3. Personal information we collect
Depending on how you use acrylic, we may collect the following categories.
| Category | Examples | Source |
|---|---|---|
| Identifiers | Email address, account ID, authentication provider, IP address | You, your identity provider, and normal network requests |
| Account and transaction information | Plan, order and subscription status, product, amount, currency, billing identifiers | You and Lemon Squeezy |
| Service activity | Request ID, selected model, token and credit usage, processing time, feature events, errors | Generated when you use the service |
| User content | Instructions, document text, selected content, attachments, and generated results | You, when you run a cloud task or contact support |
| Device and diagnostics | App version, operating system, locale, browser or device information, crash and error details | Your device and browser |
| Support information | Email, message, screenshots or files you choose to attach | You |
| Waitlist and communications | Email address and communication preferences | You |
| Approximate location | Country or general region inferred from IP or transaction information | Network and payment providers |
PostHog analytics on the marketing website runs without storing an analytics identifier in cookies, localStorage, or sessionStorage. Web and desktop analytics are configured to exclude prompts, document bodies, file names, file paths, email addresses, and similar work content from events. Session recording, heatmaps, automatic screen capture, and automatic click capture are disabled.
4. How we use personal information
We use personal information to:
- create, authenticate, secure, and administer accounts;
- perform document and AI tasks you request;
- meter model usage and provide plans, credits, subscriptions, and team features;
- process orders and support billing, cancellations, and refunds;
- provide support and troubleshoot errors;
- protect acrylic, our users, and third parties from fraud, abuse, and security threats;
- understand feature performance and improve the product using limited analytics;
- communicate service, security, legal, and—when permitted—marketing updates; and
- comply with law and establish, exercise, or defend legal claims.
5. AI content and model providers
- In local mode, content used for the AI task stays on your device for AI processing.
- In cloud mode, acrylic transmits only the information needed to perform the task through our API to OpenRouter and the selected model provider.
- acrylic’s usage ledger currently records metadata such as request ID, model, token counts, credits, cost, and timing. It does not store prompt or response bodies in that ledger.
- OpenRouter settings and model-provider retention and training practices can differ. We identify the provider selected for a cloud task in the product and update this Policy when the available providers or applicable controls materially change.
- We do not use your private documents or prompts to train a general-purpose AI model. If we offer an optional training or improvement program, we will describe it separately and obtain any consent required by law.
AI outputs can be inaccurate. You are responsible for reviewing outputs before relying on, publishing, or submitting them.
6. How we disclose personal information
We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information in the following circumstances:
- Service providers. Hosting, authentication, AI inference, analytics, customer support, email, security, and infrastructure providers process information for us.
- Payment and commerce provider. Lemon Squeezy acts as Merchant of Record and directly handles checkout, payment methods, tax, receipts, and payment disputes under its own terms and privacy policy.
- Features you choose. A web search, image generation, cloud AI, or future integration sends the information needed to the provider you choose to use.
- Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect rights and safety, or investigate fraud and security incidents.
- Business transaction. Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice requirements.
- With your direction. We disclose information when you ask us to or give valid consent.
Current providers include Supabase for authentication and databases, Fly.io for API hosting, OpenRouter and selected model providers for cloud AI, Lemon Squeezy for commerce, PostHog for cookieless web audience measurement and limited product analytics, Linkup for user-initiated web search, OpenAI or FAL when enabled for image generation, and Resend and Google Workspace for support email delivery and receipt.
7. Retention
We retain personal information only for as long as reasonably necessary for the purposes described above, including providing the service, meeting legal and accounting obligations, resolving disputes, and enforcing agreements.
| Information | Retention rule |
|---|---|
| Account and authentication data | Until account deletion; removed from active systems without undue delay and from backup copies within 30 days |
| Local documents, chats, and settings | On your device until you delete them or remove local app data |
| Cloud prompt and response bodies | Not stored in acrylic’s usage ledger; provider retention depends on the model you select and that provider’s operating policy |
| Usage, security, and error metadata | Per-request token detail for 30 days; transaction-ledger records until account deletion or a longer legally required period |
| Support messages and attachments | One year after the request closes, or three years when the record concerns a consumer complaint or dispute |
| Waitlist email | Until invitation, withdrawal, or deletion request |
| Analytics events | Up to 12 months from collection |
| Transaction and tax records | As required by applicable tax, accounting, consumer-protection, and payment laws |
We may preserve specific records longer when required by law, subject to a legal hold, or necessary for a dispute. When retention ends, we delete or deidentify the information using reasonable measures.
8. Cookies and similar technologies
We use essential and functional storage for authentication, security, and preferences requested by the user. PostHog on the marketing website does not store analytics cookies or a persistent browser identifier. It sends page paths and limited conversion events. Person profiles, advertising, retargeting, session recording, heatmaps, and automatic click capture are disabled.
To distinguish visits for a limited period, PostHog creates a one-way server-side hash from the IP address, browser information, hostname, and a value that changes daily. acrylic respects the browser's Do Not Track signal, and you can block analytics requests with browser or content-blocking tools. See the Cookie Policy for the current inventory and retention periods.
9. Your privacy choices and rights
You may ask us to access, correct, delete, or provide a copy of your personal information, or object to or restrict certain processing where applicable. You may withdraw consent for future processing and opt out of marketing email using the link in the message.
Residents of California and other states with comprehensive privacy laws may also have rights to:
- know the categories, sources, purposes, and recipients of personal information;
- request specific pieces of personal information;
- correct inaccurate personal information;
- delete personal information, subject to legal exceptions;
- obtain portable data;
- opt out of sale, targeted advertising, or certain profiling;
- limit certain uses or disclosures of sensitive personal information; and
- appeal a decision or receive non-discriminatory treatment for exercising a right.
acrylic does not currently sell personal information or share it for cross-context behavioral advertising, so there is no sale or advertising sharing to opt out of. If that practice changes, we will update this Policy, provide a clear opt-out, and honor legally required browser-based signals such as Global Privacy Control.
Send a request to j-choi@acrylichq.com. We may verify your identity and authority before completing it. An authorized agent may submit a request where permitted by law. We will respond within the period required by applicable law and explain any denial and available appeal process.
10. Children’s privacy
acrylic is not directed to children under 13, and we do not knowingly collect their personal information. If a parent or guardian believes a child provided personal information, they may contact us to request deletion. Users below the age of legal majority must have permission from a parent or guardian where required.
11. Security
We use reasonable administrative, technical, and organizational measures designed to reduce unauthorized access, use, alteration, or loss. Measures include access controls, encrypted transmission, credential protection, software updates, logging, and vendor review. No storage or transmission method can guarantee absolute security.
12. International transfers
acrylic and its providers may process personal information outside your state or country, including in the United States, Japan, and other locations where a model or feature provider operates. Privacy laws in those locations may differ. Where required, we use contractual and other safeguards for international transfers.
13. Changes to this Policy
We may update this Policy when the law, service, or data practices change. We will show the effective date and provide advance notice of material changes through the service, email, or another reasonable channel. We will request consent when required.
14. Contact us
- Controller: Afterimage Inc. (Korean legal name: 주식회사 애프터이미지)
- Privacy contact: acrylic operations team
- Address: Unit 3304, Building B, Intellige, 177 Jeongjail-ro, Bundang-gu, Seongnam-si, Gyeonggi-do, Republic of Korea
- Privacy email:
j-choi@acrylichq.com
If you have an unresolved privacy concern, you may also contact the privacy or consumer-protection authority available in your jurisdiction.