Privacy Policy
Last updated: July 8, 2026
This Privacy Policy describes how Pointlight AI ("we", "us", or "our"), a company registered in British Columbia, Canada, with its principal place of business in Surrey, British Columbia, collects, uses, shares, and protects personal information when you visit our marketing site at www.pointlight.ai or use the product at app.pointlight.ai (collectively, the "Service"). By using the Service, you agree to this Policy and our Terms of Service. If you do not agree, please do not use the Service.
Notice to Canadian Users
If you are located in Canada, we process personal information in accordance with the Personal Information Protection Act (British Columbia) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable, including for cross-border and interprovincial data flows. You may contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada with privacy complaints.
Notice to European, UK & Australian Users
If you are located in the European Economic Area (EEA), United Kingdom, or Australia, additional rights and disclosures apply as described in the "Your Rights" section below. We process personal data in accordance with applicable data protection laws, including the GDPR, UK GDPR, and the Australian Privacy Act 1988 where applicable.
Information We Collect
Information you provide. We may collect contact and account information such as your name, email address, and profile details when you register, sign in with Google, contact support, or subscribe to paid plans.
User Content. When you use the Service, we process images, sketches, plans, prompts, references, project files, canvas data, and AI-generated output that you upload or create ("User Content").
Payment information. When you purchase subscriptions or credit packs, payment transactions are processed by Stripe. Stripe collects payment card and billing details; we do not store your full payment card number.
Information from third-party sign-in. If you sign in with Google, we receive information from Google such as your name, email address, profile picture, and authentication tokens, as authorized by your Google account settings.
Information collected automatically. We and our service providers may automatically collect device and usage information, such as IP address, browser type, operating system, pages viewed, referring URLs, session duration, and general location derived from IP address.
User Content & AI Processing
We process User Content to operate the Service — including generating, editing, storing, displaying, securing, and supporting your output.
We do not train our own models on your content. We do not use your uploads, prompts, references, project files, or generated output to train, fine-tune, or improve generative AI models that we develop or control.
The Service may send User Content to third-party AI model providers (such as Google Gemini or OpenAI) and infrastructure providers so they can generate, edit, host, secure, or process output for you. Their handling of data is governed by their own terms and policies.
How We Use Information
We use personal information to provide and improve the Service, manage your account, process payments, deliver output, provide support, prevent fraud, comply with law, and send service-related communications.
Analytics & Cookies
Google Analytics 4 (GA4) runs on the marketing landing site (www.pointlight.ai). GA4 is not loaded on the product application.
PostHog runs on the product application (app.pointlight.ai) for product analytics. PostHog is not loaded on the marketing landing site.
Sentry may receive error reports from the app and backend to help us fix bugs.
We use cookies and local storage for session management, authentication tokens, UI preferences, and analytics identifiers. You can limit cookies through your browser settings or install Google's analytics opt-out add-on.
For visitors in the EU and UK, we show a cookie consent banner before loading non-essential analytics cookies.
How We Share Information
We may share information with service providers such as Stripe, Google Firebase, Cloudflare R2, hosting providers, AI model providers, Sentry, PostHog, and GA4 — only as needed to operate the Service. We may also disclose information when required by law or to protect rights and safety. We do not sell your personal information.
International Data Transfers
Your information may be processed in Canada, the United States, and other countries where our service providers operate. Where required, we implement appropriate safeguards for international transfers.
Data Retention & Security
We retain information for as long as necessary to provide the Service and comply with legal obligations. We use reasonable measures to protect personal information; no online service can guarantee absolute security.
Children
The Service is not directed to children under 18. We do not knowingly collect personal information from children.
Your Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, withdraw consent, and lodge a complaint with your local data protection authority (for example, the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, an EU/UK supervisory authority, or the Office of the Australian Information Commissioner). Residents of certain U.S. states may have additional rights under CCPA/CPRA. To exercise your rights, email support@pointlight.ai.
Contact
Pointlight AI
Surrey, British Columbia, Canada
support@pointlight.ai
Questions about this Policy or your data may also be sent to fan.gao@hotmail.com.