Privacy Policy

We collect the following types of information when you use our services:

Account Information:

• Email address and name (provided during registration)
• WhatsApp number (provided during service purchases for communication)
• Authentication data managed through our identity provider (Supabase Auth)

Service & Payment Information:

• Transaction IDs and payment references (Vodafone Cash, InstaPay, crypto)
• Payment screenshots uploaded for verification
• Service subscription details and usage history
• API usage logs (model, tokens used, timestamps)

Technical Information:

• IP address, browser type, and device information
• Pages visited and interaction patterns
• Error logs for debugging and service improvement

We use the information we collect to:

• Provide, maintain, and improve our services (VPS, n8n, AI tools, LLM API)
• Process payments and verify transactions
• Communicate with you about your account, services, and support requests
• Send important service notifications (maintenance, outages, renewals)
• Detect and prevent fraud, abuse, and security threats
• Analyze usage patterns to improve our platform and user experience
• Comply with legal obligations

We do not sell your personal data to third parties. We may share limited information with:

• Infrastructure providers — to provision and manage your cloud services (e.g., server hosting providers)
• Payment processors — to verify and process your transactions
• AI model providers — API requests may be routed through upstream providers (e.g., OpenRouter) to deliver AI capabilities
• Law enforcement — only when required by applicable law or valid legal process

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS) across all services
• Secure authentication via Supabase Auth with session management
• API keys are hashed and stored securely — only prefixes are visible after creation
• Regular security audits and monitoring of our infrastructure
• Access controls limiting who can view sensitive data within our team

While we take every reasonable precaution, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but strive to protect your information to the best of our ability.

We use cookies and local storage for:

• Authentication — to keep you signed in securely
• Preferences — to remember your theme (light/dark mode) and settings
• Referral tracking — to attribute referral codes to the correct users
• Analytics — to understand how our platform is used (via privacy-friendly tools like Plausible, if configured)

We do not use invasive tracking cookies or share cookie data with advertising networks.

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your account and associated data
• Portability — request your data in a machine-readable format
• Objection — object to certain processing of your data

To exercise any of these rights, please contact us through our official support channels. We will respond to your request within 30 days.

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 90 days for legal compliance, dispute resolution, or fraud prevention purposes.

Payment records may be retained longer as required by financial regulations.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes constitutes your acceptance of the revised policy.