Account information you provide when signing up — name, email address, and password.
Payment information processed securely through Creem, our payment provider. Subscriptions created before our migration to Creem are still serviced by Stripe. We never store raw card numbers.
App screenshots and creative assets you upload for processing. These are stored securely and never shared.
Usage data such as feature interactions, session duration, and error logs to improve the product.
Device and browser information collected automatically for security and compatibility purposes.
02
How We Use Your Information
To provide and operate the ShotQuill service, including screenshot generation and AI-powered copy.
To process payments and manage your subscription through our billing provider.
To send transactional emails — account confirmations, billing receipts, and important service updates.
To analyze aggregate usage patterns and improve product features. We never sell personal data.
To detect and prevent fraud, abuse, or violations of our Terms of Service.
03
Data Storage & Security
Your data is stored on servers hosted by Supabase in the US (us-east-1). We use industry-standard encryption in transit (TLS 1.3) and at rest (AES-256). Access to production data is restricted to essential personnel only and requires multi-factor authentication.
04
Cookies & Tracking
We use strictly necessary session cookies to keep you signed in. Separately, we use Microsoft Clarity for product analytics, which sets its own first-party cookies (_clck and _clsk) and records individual sessions — your clicks, scrolling, and mouse movement on our pages may be replayed by us to understand where the product is confusing. Clarity masks sensitive input content by default. We do not use advertising trackers and we do not sell your browsing data.
05
Third-Party Services
Creem — payment processing and subscription billing. Subject to Creem's privacy policy.
Stripe — payment processing for legacy subscriptions created before our migration to Creem. Subject to Stripe's privacy policy.
Supabase — database and authentication infrastructure.
Google — AI copy generation via the Gemini API. Uploaded content may be processed by Google under their data processing terms.
Microsoft Clarity — product analytics and session replay. Subject to Microsoft's privacy statement.
Vercel — hosting and edge delivery.
06
Data Retention
We retain your account data for as long as your account is active. If you delete your account, we purge personal data within 30 days, except where retention is required by law (e.g., billing records kept for 7 years for tax compliance).
07
Your Rights
Access — request a copy of the personal data we hold about you.
Correction — ask us to correct inaccurate or incomplete information.
Deletion — request deletion of your account and associated personal data.
Portability — receive your data in a machine-readable format.
Objection — opt out of non-essential communications at any time.
08
Children's Privacy
ShotQuill is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.
09
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the app at least 14 days before they take effect. Continued use of the service after changes constitutes acceptance.