Privacy Policy
What we collect, why we collect it, and how it's protected.
What we collect
Account data: username, email, password hash, role, tier.
Session data: IP address, approximate location (city/country), user-agent, login timestamps.
Activity data: pages viewed, prompts opened, tools downloaded, support tickets.
We do NOT collect: payment card numbers (processed by Stripe), real names, government IDs.
Why we collect it
Authenticate you and prevent abuse.
Show you relevant content and your usage analytics.
Send security notifications (new logins, password changes).
Comply with legal obligations where applicable.
Who we share with
Supabase (database + auth hosting).
Gmail SMTP (transactional emails — login alerts, OTP).
ipapi/ipwhois (IP geolocation lookups).
We never sell your data. Period.
Your rights
Export your data from your dashboard.
Request soft-delete (30-day appeal window) or hard-delete by emailing legal@ammar.exe.
Opt out of non-essential notifications in Settings.