Privacy Policy
Last updated: 25 September 2026 · Applies to infyicon.com, the Infyicon Desktop app, the Infyicon app for Canva, the Infyicon add-in for Microsoft Word & PowerPoint, and the Infyicon add-on for Google Docs, Slides & Sheets.
Who we are
Infyicon is a free icon library operated by its owner in Gujarat, India. Contact: [email protected].
What we collect on infyicon.com
We collect basic, first-party usage analytics: pages viewed, search terms typed on our site, icons downloaded, approximate location derived from your IP (country level), browser and device type. We store a random identifier in your browser's local storage to count returning visitors. We do not collect your name, email or any account data, because Infyicon does not require an account. We also use Google Analytics with IP-anonymised measurement. Server logs (IP address, requested URL, time) are kept for security and are rotated automatically.
The Google Docs, Slides & Sheets add-on
The Infyicon add-on requests only the minimum Google permissions needed to work: access to the current document, presentation or spreadsheet it is used in (to insert the icon you click), permission to show its sidebar, and permission to contact infyicon.com (to search icons and fetch the image you choose). The add-on does not read your document content, does not access other files in your Google Drive, does not store, share or transmit any document data to us or anyone else, and does not use your Google data for advertising. The only information sent to our servers is the icon search terms you type in the sidebar and the request for the icon images themselves. The add-on's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we protect your data
This section describes the technical and organisational measures that apply to every Infyicon integration, and in particular to the Google Docs, Slides & Sheets add-on and the Google user data it can access under the Google API Services User Data Policy.
Encryption in transit
All communication between the add-on (or any other Infyicon integration) and infyicon.com uses HTTPS with TLS 1.2 or newer, and plain HTTP requests are redirected to HTTPS. Traffic to our servers is fronted by Cloudflare, and our origin server only accepts connections from Cloudflare. Requests to Google APIs are made only through Google's own encrypted Apps Script services.
What Google user data we access, and what we never store
The add-on uses the currentonly scopes for Docs, Slides and Sheets solely to place the icon you clicked into the file that is open. It does not read, copy, index or transmit the text, images or cell values of that file, and it never accesses your Drive, Gmail, Contacts or any other Google service. Because the add-on does not read document content, no Google user data is ever received, stored, cached or logged by infyicon.com. The only data that reaches our servers is the search term you type into the sidebar and the request for the icon image, and these requests are not linked to your Google account or identity. OAuth tokens are handled entirely by Google's Apps Script platform; we never receive, store or export them.
Retention and deletion
Icon search requests appear in our web-server logs together with the requesting IP address and time; these logs are used only for security and abuse prevention, are readable only by the server administrator, and are rotated daily and deleted automatically after 14 days. Aggregated search-term statistics (which icons people look for) are kept without any IP address or identifier. No other data from the add-on is retained. You can revoke the add-on's access at any time at myaccount.google.com/permissions or by uninstalling it from the Google Workspace Marketplace; revocation is effective immediately and, since we hold no Google user data, there is nothing further for us to delete. If you want the log entries for your IP address removed sooner than 14 days, email [email protected] and we will delete them within 7 days.
Access control
Infyicon is operated by a single owner. Administrative access to the production server is limited to that owner, over SSH using a private key, behind a host firewall (ufw) that exposes only the web ports; the server receives automatic security updates. The accounts used to administer Google Cloud, Cloudflare and our hosting provider use two-step verification. No third party, contractor or processor has access to server logs or to any data received from the add-on. We do not sell, rent or share data with advertisers or data brokers, and we do not use any Google user data to build profiles, train models or serve advertising.
Security monitoring and incident response
The server applies security updates automatically, enforces request rate limits, and keeps timestamped configuration backups. If we ever became aware of a security incident affecting data received through the add-on, we would investigate immediately, notify affected users and Google without undue delay (and within 72 hours where required by law), and publish details of the incident and the remedy on this page.
Limited Use disclosure
Infyicon's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In practice this means: Google user data is used only to provide the icon-insertion feature you see in the sidebar; it is never transferred to others except as necessary to provide that feature, to comply with law, or as part of a merger or acquisition with prior notice; it is never used for advertising; and no human reads it except with your explicit permission, for security purposes, to comply with law, or in aggregated, anonymised form for internal operations.
The Canva app
The Infyicon app for Canva lets you search the icon library and add an icon to the design you are working on. It has no backend of its own and needs no account or login. When you insert an icon, Canva uploads the image you choose into your Canva account; the only information sent to infyicon.com is the search terms you type and the request for the icon images themselves. The app does not read, store, share or transmit your design content to us or anyone else, and does not use your data for advertising.
The Webflow app
The Infyicon app for Webflow (“Infyicon — Free Icons”) is a Designer Extension that lets you search the icon library and insert an icon into the Webflow site you are editing. It needs no account or login and has no backend of its own. When you insert an icon, the app uploads that single image into your own Webflow site’s Assets; the only information sent to infyicon.com is the search terms you type and the request for the icon images themselves. It uses the Webflow Designer API only to add the chosen image to your canvas, and only when you use it. The app does not read, store, share or transmit your site content to us or anyone else, and does not use your data for advertising. Your published site then serves the icon from your own Assets and makes no calls to infyicon.com.
The Microsoft Word & PowerPoint add-in
The Infyicon add-in for Microsoft Word and PowerPoint (“Infyicon — Free Icons”) lets you search the icon library and insert an icon into the document or presentation you are working on. It needs no account or login. The add-in only accesses the current document or presentation to insert the icon you choose, and only when you use it. The only information sent to infyicon.com is the search terms you type and the request for the icon images themselves. The add-in does not read, store, share or transmit your document content to us or anyone else, and does not use your data for advertising.
The Desktop app
Infyicon Desktop talks only to infyicon.com to search and download icons. It stores no personal data and contains no trackers. Downloaded icons are cached temporarily in your system's temp folder.
Cookies and similar technologies
We use local storage for the anonymous visitor identifier described above and for remembering interface preferences. Google Analytics sets its own cookies. We do not run third-party advertising and do not sell or rent any data to anyone.
Payments
If you buy a premium plan, payment is processed by our payment partners (such as PayPal or a merchant of record). We receive your order details and license status but never see or store your card numbers.
Your rights
Because we hold no account data about you, there is usually nothing personal to export or delete. If you believe we hold personal data about you (for example in server logs or a premium purchase record), email [email protected] and we will access, correct or delete it as applicable under the Indian DPDP Act, the GDPR and similar laws.
Changes
We will post any changes to this policy on this page with an updated date above.