jsontoimg

Privacy Policy

Last updated: 20 August 2026

This policy describes how Skndan ("jsontoimg", "we", "us") handles personal data when you visit jsontoimg.com, use the product at app.jsontoimg.com, or call the render API. The marketing site and the product app are separate origins; both are covered here.

Who we are

jsontoimg is operated by Skndan. For privacy questions, use the chat widget on jsontoimg.com. The product is an image generation API: you design a template, send JSON, and receive PNG or JPG files.

Data we collect

  • Account data. Name, email, and profile photo from Google OAuth when you sign in to the app. We do not run a password-based signup on the marketing site.
  • Billing data. Subscription plan, invoice history, and payment identifiers from our payment processor (Dodo Payments). We do not store full card numbers.
  • Render data. Template JSON, layer overrides, uploaded assets, and generated image URLs needed to fulfill API requests and show job history.
  • Usage data. Render counts, API key identifiers, and workspace membership so we can enforce plan limits.
  • Support data. Messages you send through Chatwoot on jsontoimg.com or app.jsontoimg.com.

Cookies and analytics

The marketing site uses first-party cookies for theme preference. Session cookies for the product app are set by app.jsontoimg.com (and, when configured, a parent-domain cookie so a signed-in user can move between the site and the app).

We use a self-hosted Rybbit instance at tracking.skndan.com for page analytics (page views, referrers, device). We do not sell this data. Chatwoot (chat.skndan.com) loads when you open the chat widget and processes the conversation you start.

How we use data

  • Provide the editor, render API, and dashboard.
  • Authenticate you, bill your workspace, and enforce quotas.
  • Debug failed renders and abuse of the API.
  • Respond to support requests.
  • Understand which marketing pages are used, in aggregate.

We do not sell personal data. We do not use render payloads to train public models.

Processors

We use vendors to run the product: hosting (Vercel for the marketing site; our VPS for the app, API, and worker), object storage for images, Google for sign-in, Dodo Payments for billing, Rybbit for analytics, and Chatwoot for support. Each processor only receives what that function needs.

Retention

Account records last for the life of the workspace plus a short period after deletion so we can close billing. Render inputs and output files follow the plan retention window, then a 14-day archive before deletion. Uploaded assets stay until you delete them. Support transcripts are kept long enough to resolve the ticket. Analytics events are stored on our Rybbit instance and periodically pruned.

Your rights

You can access or export workspace data from the app, delete API keys, and delete the workspace. To request deletion of analytics or support records tied to your email, contact us through the chat widget. If you are in a region with additional rights (access, correction, erasure, portability, objection), send the request the same way and we will respond within the time those laws require.

Children

jsontoimg is not directed at children under 16. We do not knowingly collect data from them.

Changes

We will update this page when the policy changes and revise the date above. Continued use of the site or API after a change means you accept the updated policy.