1. Scope and controller
This policy applies to Supapose websites, accounts, workspaces, generation tools, templates, support, and payment-related records. Supapose is responsible for the processing described here, except where an identified provider acts under its own terms.
2. Information we collect
- Account and profile data, such as name, email, authentication method, workspace membership, locale, and security events.
- Creative content, including prompts, uploads, reference media, templates, workflow configuration, generated assets, and feedback.
- Usage and device data, such as pages, actions, model selections, generation status, browser information, IP address, and diagnostic logs.
- Commercial records, such as plan, credit balance, quotes, purchase descriptions, payment status, and provider transaction references. Supapose does not receive or store your full card number.
3. How we use information
- Provide accounts, workspaces, storage, generation, templates, billing, support, and requested features.
- Authenticate users, prevent abuse and fraud, investigate incidents, enforce policies, and protect the service.
- Measure reliability and product use, fix defects, understand feedback, and improve user experience.
- Comply with legal obligations and establish, exercise, or defend legal claims.
4. AI models and service providers
When you start a generation, Supapose sends the prompt, selected settings, and necessary reference media to the configured model provider. The provider returns status and output data so Supapose can complete the request. Do not submit sensitive personal information unless it is necessary and you have permission to do so.
- Cloud storage and delivery providers host private uploads and generated assets.
- Authentication providers process sign-in data when you choose Google, Apple, or another available provider.
- A secure payment provider hosts payment entry and processes payment details. Supapose stores transaction status and references, not full card details.
6. Storage, retention, and international processing
Data may be processed in countries where Supapose or its providers operate. We use access controls and contractual safeguards appropriate to the service. Account, workspace, asset, billing, and security records are retained while needed to provide the service and for legitimate legal, accounting, fraud-prevention, and dispute purposes. Retention length varies by record type; some information may remain in protected backups for a limited period after deletion.
7. Cookies, analytics, and browser storage
Supapose uses essential cookies for secure sessions, request protection, and reliable operation. Regional policy determines whether product analytics and campaign measurement start automatically, require your choice, or remain disabled. Where a choice is required, only essential services run until you accept; the choice is remembered for one year and can be changed through Privacy choices. First-party journey records use HMAC digests rather than raw Supapose identifiers or IP addresses. When marketing measurement is enabled, Meta Pixel and Conversions API receive selected events, a shared deduplication identifier, browser user agent, Meta browser or click identifiers when available, and hashed matching data. Supapose does not send prompts, uploads, generated media, full card details, or raw IP addresses to Meta. Browser storage also remembers language, theme, layouts, temporary checkout references, and unsent drafts.
8. Your choices and rights
Depending on your location, you may ask to access, correct, export, restrict, object to, or delete personal information, and may have a right to complain to a regulator. Workspace content may also be controlled by the workspace owner. Send a request from your account email to privacy@supapose.ai; we may verify identity and retain records where the law permits or requires it.
9. Children and updates
Supapose is not directed to children under 18 and should not be used by a child without authorization from a parent or legal guardian where permitted. We may update this policy as the service changes and will publish a new effective date.
Privacy questions and data requests: privacy@supapose.ai.