Privacy Policy
Last updated: July 2026
What we collect
Account data: your email address and sign-in method (Google or email). We never see or store your Google password; if you choose a password with us it is stored only as a bcrypt hash.
Usage data: credit usage counters and anonymised, hashed identifiers (IP + device hash) used to enforce free-tier limits.
Payment data: handled entirely by PayPal. Card numbers never reach our servers. We store only your subscription id and status.
Your prompts
Prompts and generated content are sent to the AI model provider (via OpenRouter) to produce your result. Chat history is stored in your own browser (localStorage), not on our servers. We don't sell your data or use your prompts for advertising.
Third parties
Supabase (authentication and database), PayPal (payments), OpenRouter and its upstream model providers (AI processing), Vercel (hosting), Upstash (rate limiting). Each processes only what is needed for its function.
Your rights
You can request a copy or deletion of your account data at any time via the contact page. Deleting your account removes your profile and subscription records.