Privacy Policy

Account and profile data: Name, email address, password hash, profile image URL you choose to add, linked sign-in information, and records relating to verification, password reset, account deletion, and security features such as two-factor authentication.

Subscription and billing data: Plan, billing interval, subscription status, billing-period dates, Stripe customer and subscription identifiers, and limited transaction metadata. We do not store full card numbers.

Notification and unsubscribe data: Notification preferences, push-subscription data, and unsubscribe tokens.

AI chat and support data: AI chat messages, timestamps, conversation metadata, support requests, automated safety or abuse signals, and records created when chats are reviewed or moderated.

Marketing sign-up data: If you join our mailing list or early-access list, we collect the information you submit, such as your email address, and may also collect related metadata such as IP address, approximate location, timezone, language, user agent, and referrer where available.

Sign-in providers: If you sign in with a third-party provider such as Google, we may receive basic account details such as your name, email address, and profile image.

Payment providers: We receive subscription status, customer identifiers, and limited billing metadata from Stripe or another payment provider we use.

Device, usage, and log data: We collect session identifiers, IP address, browser or device information, pages viewed, referrers, timestamps, and related technical logs when you use our websites and applications.

Analytics data: We generate aggregated analytics and performance signals to understand how our sites and features are used.

To provide the Service: We use personal data to create and manage accounts, provide subscriptions, process payments, deliver support, and operate the Service. Our lawful basis is usually performance of our contract with you.

To secure and improve the Service: We use personal data to prevent abuse, investigate fraud, enforce our Terms and Acceptable Use Policy, maintain logs, debug issues, and improve reliability and performance. Our lawful basis is usually our legitimate interests in running a secure and effective service.

To comply with law: We may keep records, respond to lawful requests, and meet tax, accounting, and regulatory requirements. Our lawful basis is compliance with legal obligations.

For marketing and consent-based processing: If you sign up for marketing emails or if we use non-essential cookies or similar technologies where consent is required, our lawful basis is your consent.

We share personal data only where needed to run the Service or where law requires it.

• Authentication and social sign-in providers
• Payment processors, including Stripe, for billing and subscription management
• Hosting and infrastructure providers for application and database hosting
• Email delivery providers for account, security, and transactional emails
• Analytics providers for usage measurement
• AI service providers used to power chat and related AI-assisted features
• Communications tools we use to receive support or marketing submissions
• Professional advisers, regulators, law-enforcement bodies, or courts where required

We retain personal data only for as long as reasonably necessary for the purposes described in this notice, including to provide the Service, keep business records, resolve disputes, enforce agreements, and meet legal, tax, fraud-prevention, and security obligations.

• Account, profile, and billing records are usually kept while your account is active and for a reasonable period afterwards
• Billing and accounting records may be kept longer where required by tax, accounting, or fraud-prevention obligations
• Session and server-log data is generally kept for up to 90 days unless needed longer for security, abuse prevention, or investigations
• AI chat, moderation, and abuse records may be retained for longer where needed for safety, disputes, or legal compliance
• Notification preferences, push subscriptions, and unsubscribe tokens are kept until deleted or no longer needed for the account
• Marketing sign-up records are kept until you unsubscribe, withdraw consent, or they are no longer needed for the relevant campaign