Information we collect
We process the account details you provide, such as your name, email address, and password credentials. Passwords are stored as hashes. If you use Google or GitHub sign-in, we receive profile and account identifiers from that provider; we do not receive your provider password.
We process organization membership, projects, API keys, orders, credits, usage and transaction records needed to operate the service. AI requests may include prompts, uploaded files, reference images, and generated results. We also process technical data such as IP address, browser information, request times, authentication cookies, and service error logs.
How we use information
We use this information to authenticate users, provide AI features and storage, administer organizations, measure usage, charge and reconcile credits and payments, prevent abuse, troubleshoot, and respond to support requests. We do not sell personal information.
Services that process data
Cloudflare hosts the application, database, and file storage. Google and GitHub handle OAuth sign-in when you choose them. Payment providers process checkout and send us payment status; we do not store complete card numbers. AI requests and supplied media may be sent to the selected model provider to produce a result. Email delivery and anti-abuse services may process the information necessary for their function when enabled.
Those providers have their own policies and may process data in other countries. Avoid submitting sensitive information to AI services unless you have the right to share it and understand the selected provider’s terms.
Product analytics
When product analytics is enabled for this site, PostHog automatically processes page templates, explicitly marked actions, signup and login events, confirmed purchases and product execution outcomes. Events may include a stable account ID and the authorized organization, product, amount, duration or safe error code. We do not send names, email addresses, prompts, commands, file contents, credentials, raw URLs or query strings; session recording and automatic DOM capture are disabled.
Analytics starts automatically without a separate permission prompt. Anonymous identifiers are stored in the current tab’s session storage; after sign-in, events are linked to your account ID. Signing out or switching accounts clears the previous analytics identity. Analytics is separate from any AI provider terms.
Contact us with questions about analytics or to request deletion of historical analytics data, including after account deletion. Signing out or deleting your account does not automatically delete events already sent to PostHog.
Retention and security
We retain account and service records while needed to operate your account and organization, and may retain billing, security, or audit records where required for legitimate business or legal obligations. Deleting an account may be restricted while it owns active resources or has unresolved billing; deleting an account does not automatically erase records that must be retained.
We use access controls, authentication, encrypted transport, and managed infrastructure to protect information. No system is completely secure.
Your choices and requests
You can review account details in the console or request account deletion through account settings. To ask about access, correction, deletion, or this policy, email us using the contact address below. We may need to verify your identity before acting.
We may update this policy as the service changes. The effective date above identifies this version; material changes will be communicated through the site or other appropriate channels.