Privacy policy

Effective 2026-10-21

What we process

• Your account: the name and e-mail address Google or Apple share when you sign in, and a hashed copy of the provider's account id so the same person always reaches the same account. Apple's Hide My Email addresses are supported.
• Sign-in session: one first-party cookie that keeps you signed in to the dashboard. We use no advertising or tracking cookies.
• API keys: stored only as salted hashes. A key is shown to you once and never stored or logged in full.
• Files and results: files you upload and the images, models and diffs we produce are stored in Cloudflare R2 and deleted automatically after 24 hours.
• Task records: skill name, arguments, status, timing and credits, kept for 30 days for support and billing, then deleted.
• Payments: Stripe handles card details; we never see or store them. We keep the Stripe customer id, the plan, the amount and the receipt link.

What we do not do

• We do not log file contents or prompts in our server logs; logs contain ids, sizes and timings.
• We do not sell or share your data, and we do not use it to train models.

Processors

Google Cloud (hosting, database), Cloudflare (file storage), Stripe (payments), Google and Apple (sign-in), Google Fonts (web fonts loaded by your browser), and Lemon Squeezy for keys bought before accounts existed. Skills run on the operator's own computer. ai_render sends your object description, and code_task your repository and prompt, to Anthropic's Claude to do the work.

Your choices

Revoke keys and cancel plans yourself in the dashboard. To delete your account, task records and files, or for any privacy question, write to sang89vh@icloud.com.