Privacy Policy

Tamorin LLC (“we”) operates Appliftoff. This policy explains what we collect, how we use it, and the choices you have.

1. What we collect

• Account data — email, display name, and avatar you provide.
• Project data — screenshots you upload and the rendered output we generate on your behalf.
• Payment metadata — processed by Stripe. We store the resulting checkout and payment identifiers, never full card details.
• Technical logs — minimal server logs used to debug and secure the Service.

2. How we use it

We use your data to operate the Service: authenticate you, generate and deliver your screenshots, process payments, and communicate about your account.

3. Subprocessors

Running the Service means handing some data to trusted infrastructure providers. Each is bound by their own privacy commitments and processes data solely to deliver their service to us:

• Supabase — authentication, database, and private storage for uploads and renders.
• Stripe — payment processing. Card data is entered directly into Stripe's checkout and never touches our servers.
• Anthropic — AI copy generation. Uploads and project metadata are sent to generate your headlines and subheads. Anthropic does not use this content to train models.
• Resend — transactional email (“your shots are ready”, password resets). Only your email address and the message content are shared.

We do not sell your data or share it with advertisers.

4. Storage and data retention

Raw uploads and rendered output live in private Supabase Storage buckets scoped to your user id. Concrete retention periods:

• Project files (uploads + renders) — retained while the project exists. Deleting a project removes the associated files immediately; they are purged from backups within 30 days.
• Account data — retained while your account is active. On deletion request, we remove your account and all associated projects within 30 days.
• Payment records — Stripe checkout and payment identifiers are retained for up to 7 years to meet tax and accounting obligations. These records do not contain card numbers.
• Server logs — minimal debug and security logs are retained for up to 90 days, then automatically purged.

5. Cookies

We use only the cookies necessary to keep you signed in and to remember your theme preference. No third-party ad or analytics cookies.

6. Your rights

You can request access to or deletion of your data at any time by emailing privacy@appliftoff.com. We respond within 30 days.

7. Children

The Service is not directed to children under 13.

8. Changes

We'll post any material changes to this policy here and, if you have an account, email you before they take effect.

9. Contact

Questions? Email privacy@appliftoff.com.