Privacy Policy — DescriptAI

1. Introduction

DescriptAI (“we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our Service. By using DescriptAI, you agree to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

Account information: Email address, full name, and password when you register
Usage data: Product descriptions generated, features used, and generation history
Payment information: Billing details processed securely by Stripe — we never store card numbers
Technical data: IP address, browser type, device information, and cookies
Communications: Support requests and emails you send us

3. How We Use Your Information

To provide, maintain, and improve the Service
To process payments and manage your subscription
To send transactional emails (welcome, billing, credit warnings)
To send product updates and announcements (you can opt out)
To detect and prevent fraud and abuse
To comply with legal obligations

4. Data Sharing

We do not sell your personal data. We share data only with:

Supabase: Database and authentication provider
Stripe: Payment processing
Google (Gemini AI): AI generation — product details you submit are processed by Google's API
Resend: Transactional email delivery
Sentry: Error tracking (anonymized)

5. Cookies

We use essential cookies for authentication and session management. We also use Google Analytics to understand how users interact with our Service. You can disable non-essential cookies in your browser settings. We use a cookie consent banner to obtain your permission before setting analytics cookies.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (“right to be forgotten”)
Export your data in a portable format
Object to or restrict processing of your data

You can exercise these rights from your Settings page or by contacting us at privacy@descriptai.com

8. Security

We implement industry-standard security measures including encryption in transit (HTTPS), encrypted storage, and access controls. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your account.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

10. Contact

For privacy-related questions or to exercise your rights, contact us at privacy@descriptai.com