Privacy policy

The platform stores account profile data, generation request metadata, credit ledger entries, promo redemptions, referral events, support tickets, and file metadata required to operate the service.

Supabase Auth, Postgres, and Storage are the intended production systems. Private service role keys and provider secrets must remain server-only.

Generated files use a default 30 day retention window. The cleanup endpoint and database function support scheduled deletion.