Mermaid2Visio Privacy and Confidentiality Policy

Last updated: September 8, 2026

What Mermaid2Visio does

Mermaid2Visio converts supported Mermaid, Visio, SVG, Draw.io, and embedded-source PNG diagram inputs into editable Visio VSDX or reviewable Mermaid outcomes. Uploaded source files are processed transiently for conversion and are not intentionally retained.

Account data we store

We store product account data needed to operate the service, including email address, product access level, subscription status, profile/preferences, and conversion metadata such as diagram type, size estimates, status, timestamps, and a one-way hash.

Diagram confidentiality

Uploaded Mermaid, Visio, SVG, Draw.io, and supported PNG source is processed transiently for preview, validation, and conversion. The application stores account-required conversion metadata only unless a future feature clearly asks users to opt into saved diagrams.

If you select checkout recovery, Mermaid2Visio temporarily stores an encrypted checkout draft so your work can be restored after sign-in, cancellation, or a recovery-email return. The draft is restricted to your account and automatically deleted within 72 hours. Raw source is not added to conversion history or analytics.

PNG-input recovery

PNG conversion is limited to PNG files exported by Draw.io with an embedded copy of the diagram. Mermaid2Visio reads that embedded structure locally and transiently and does not submit the PNG to an external AI provider. Ordinary screenshots remain unsupported. Any future vision-based screenshot workflow will require a separate provider, retention, cost, and privacy review before activation.

Payments

Payment cards, bank details, invoices, and billing identity details are handled by Stripe. Mermaid2Visio stores Stripe customer/subscription identifiers and subscription status, not full payment card data.

Cookies and analytics

The site may use essential first-party cookies for sign-in, security, preferences, consent, and checkout continuity. Privacy-conscious analytics may associate page and product events with an anonymous browser identifier and campaign tags such as UTM source, campaign, and content. This does not identify a visitor by name unless they sign in or otherwise provide identifying information. Optional third-party analytics or marketing cookies should only run according to the user’s consent choices.

Retention

Account, profile, billing status, and conversion metadata are kept while needed to provide the service, support billing, troubleshoot issues, measure usage, and meet legal obligations. Users may request account review, correction, or deletion where applicable.

Jurisdiction

Mermaid2Visio is operated from Canada. Privacy handling is intended to align with Canadian privacy expectations, including PIPEDA and Quebec Law 25 principles such as transparency, purpose limitation, safeguarding, and access/correction rights.

Contact

For privacy or confidentiality requests, contact contactus@creationware.ca.