Last updated: October 13, 2026
This Privacy Policy explains how Rack City AI, Inc., a Delaware corporation (“RackCity AI”, “we”, “us”), collects, uses, and shares personal data when you access or use the RackCity AI website, application, and related services (collectively, the “Service”). This Policy supplements our Terms of Service; capitalized terms not defined here have the meaning given in the Terms.
(a) Account & identity data — your email address and authentication identifiers once you create an account (via Clerk), and a RackCity AI-issued anonymous identifier while you use the Service as a trial visitor before signing up; (b) content you provide — warehouse designs and dimensions, project names and site addresses, text prompts and instructions, and uploaded files such as building flyers, PDFs, and images (together, “User Inputs”, as defined in our Terms of Service); (c) usage & device data — your IP address, user agent, and product-usage events collected through our first-party analytics; (d) AI interaction data — the prompts you submit and the design outputs generated in response, retained in our AI usage records; and (e) billing data — if you subscribe to a paid plan, your payment card details and billing address are collected and held by Stripe, our payment processor, and never reach our servers; we receive and store your Stripe customer and subscription identifiers, your plan, its billing status and renewal date, and the amounts of your payments, so that we can grant the right features and help with billing questions.
We use this data to operate, secure, and improve the Service, including generating AI layouts from your prompts and uploaded flyers; to manage your account, saved projects, subscription, and usage allowances; to process payments and send you billing-related messages; to analyze product usage so we can fix issues and prioritize features; and, as described in Section 6 of our Terms of Service, to improve and develop RackCity AI’s own product features and models.
We share data with a limited set of service providers who process it on our behalf: Anthropic, which processes the text prompts and/or uploaded flyer content you submit in order to generate an AI layout response, under Anthropic’s own commercial API terms; Clerk, which provides our account authentication and identity services; Stripe, which processes subscription payments and holds your payment card details under its own privacy policy; Resend, which delivers the account and billing emails we send you; and Amazon Web Services, which hosts our servers and backups in the United States. We do not sell your personal information.
RackCity AI is based in, and operates its servers in, the United States. If you access the Service from the United Kingdom, the European Economic Area, or elsewhere outside the United States, your data will be transferred to and processed in the United States.
We retain your data on our active systems for as long as your account is active or as otherwise needed to provide the Service, until you request deletion as described below. Backups are retained on a rolling schedule of up to twelve (12) months independent of our active systems; a deletion request removes your data from our active systems, and backups containing your data age out on that schedule without being restored.
If you are located in the United Kingdom, the European Economic Area, Switzerland, or California, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. California residents also have the right to know what personal information we collect and to opt out of its “sale” — we do not sell personal information. Anyone, anywhere, decides whether we use their activity to improve the product with the switch described in Section 7. Where that switch starts off, we record your activity only with your consent, which you give and withdraw with the same switch; everywhere else we rely on our legitimate interest in improving the product, and the switch is how you object. To exercise any other right, email support@rackcity.ai. We will verify your request and respond within 30 days, or as otherwise required by applicable law. If you are located in the United Kingdom, the European Economic Area, or Switzerland, you also have the right to lodge a complaint with your local data protection supervisory authority.
Right to erasure. On a verified deletion request, we will delete your identifiable raw data — your account record, uploaded files, saved project designs, and stored AI prompts and outputs — from our active systems within 30 days. Anonymized, aggregated, or de-identified data that we have already incorporated into product analytics or model improvements no longer identifies you and cannot be individually extracted or removed from that aggregate.
We use a session cookie to keep you signed in, browser storage for your own preferences (measurement units, theme, an unsaved draft), and — only in the countries where analytics starts on, see below — a first-party cookie on our marketing site that remembers which campaign or referrer first brought you here. We do not use third-party advertising trackers, and no analytics data is shared with anyone. Stripe’s checkout and billing pages, which open when you subscribe or manage a paid plan, set their own cookies under Stripe’s privacy policy.
Product analytics. To improve the product we record which features you use inside the app (for example that a layout was generated, a project saved or a PDF exported), together with your IP address and browser type, on our own servers only. Whether we do is one switch in your account: open Account in the app’s toolbar and find “Use my activity to improve RackCity AI”. The choice is stored with your account, so it follows you across browsers and devices and survives signing up.
Where it starts off. If you first use the app from
the European Economic Area, Brazil, Turkey, South Korea, China,
Russia, Thailand, Saudi Arabia, the United Arab Emirates, Qatar,
Colombia, Uruguay, Vietnam, Malaysia, Egypt, Peru, Argentina or
Israel — or from Chile before 1 December 2026, or from
India on or after 13 May 2027, when those countries’
new data-protection rules take effect — the switch starts off: we record
nothing about how you use the app, and our marketing site sets no
campaign cookie, until you switch it on. Our marketing site asks you
the same question in a bar at the bottom of the page; your answer is
kept in a small cookie there (rk_consent, one year) and
passed to the app when you open it, so you are asked only once. We tell where you are from
the IP address of your first visit, using a copy of a public
IP-to-country database on our own server; nothing is sent anywhere
to find out. If you began using RackCity AI before this rule started on
21 September 2026 — or, for India, before 13 May 2027
— and have never made a choice, the switch turns off the next time
you open the app from one of these countries, until you choose.
While the switch is off and you have never chosen, the app asks you
once, when your first design is on the canvas — “Help us improve RackCity AI?”
— and waits for your answer: Yes, share usage
switches it on, No thanks keeps it off, and Not now
keeps it off and asks once more on a later visit, then not again. Whatever you pick, you can
change it later in Preferences. Nothing about your visit is sent before
you answer.
Everywhere else the switch starts on,
with this section and the line in our page footer as your notice, and
you can switch it off at any time.
What the switch does. Switched off, we stop recording how you use the app from that moment and keep only the records we need to run your account — billing and plan changes, the emails we sent you, your AI-usage count, which product experiment your account is in and the AI allowance it was given, and the fact that you changed the switch. Switching it on resumes recording. Which marketing link or referrer first brought you to RackCity AI is noted on your account when it is created, in every country, from the address you arrived on — not from a cookie.
The Service is not directed to, and we do not knowingly collect personal data from, individuals under 18 years of age.
We may update this Policy from time to time. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
Questions about this Policy or your data can be sent to Rack City AI, Inc. at support@rackcity.ai.
© 2026 Rack City AI, Inc. — All rights reserved. · Terms of Service