Trust Center

Your Data Never Trains AI

When you use InfoArt.ai, your prompts, uploaded files, and generated content are processed to create your infographics—nothing more. We never use customer data to train, improve, or fine-tune any AI models.

This isn't just our policy—it's enforced by our architecture. We use enterprise APIs from Anthropic (Claude) and Google (Gemini) that contractually prohibit using customer data for model training.

Minimal Data Retention

We retain your data only as long as necessary to provide the service:

• Generated content: Kept for 30 days to enable revisions
• Uploaded files: Deleted immediately after processing
• Account data: Deleted upon account closure

Encryption Everywhere

• In Transit: TLS 1.3 encryption for all connections
• At Rest: AES-256 encryption for stored data
• API Keys: Stored using industry-standard secret management

Infrastructure Security

• Hosted on AWS with enterprise-grade security controls
• Network isolation and firewall protection
• Regular security patching and updates
• DDoS protection and rate limiting

Application Security

• Secure authentication with JWT tokens
• Input validation and output encoding
• Protection against OWASP Top 10 vulnerabilities
• Regular security testing and code reviews

Current Status

• GDPR: Compliant with EU data protection requirements
• CCPA: California Consumer Privacy Act compliant
• SOC 2 Type II: Planned for 2026

Data Processing Agreement

Enterprise customers can request a Data Processing Agreement (DPA) that details our data handling practices and commitments.

Have a security concern or want to report a vulnerability? Contact our security team:

Email: security@infoart.ai