Legal
Privacy Policy
Last updated: August 5, 2026
What we collect
At checkout, we collect your email address and purchase/plan data. We also collect API-key usage metadata for rate limiting.
Who processes it
- Paddle: Payments and Merchant of Record
- Supabase: Stores user records: email, plan, hashed API key
- Resend: Sends transactional email
- Cloudflare: Hosting and CDN
What we do NOT do
We do not sell your data. We do not run ad tracking. We do not use analytics cookies today.
We send email for transactional purposes only: API key delivery and billing lifecycle events. We do not send marketing email without your opt-in.
Data retention and your rights
You can request an export or deletion of your data by contacting support.
Cookies and storage
While the site is in preview, it is protected by a Basic-auth session. During checkout, we use sessionStorage only, and nothing else.
Contact
Questions about this policy? Email [email protected].