Privacy Policy
This is a placeholder, not a privacy policy.
It is an outline of the sections most SaaS applications need, so you know what to cover. It has not been written or reviewed by a lawyer and it makes no commitments on your behalf. Replace it entirely before you launch — your obligations depend on where you and your users are, and on what you actually do with their data.
What this template collects out of the box
Useful as a starting inventory, because you have to disclose it:
- Account data — name, email address, and a hashed password, or a Google account identifier if signing in with Google.
- Content you create — projects, the input you submit to jobs, the results those jobs produce, and assistant conversations.
- Billing data — handled by Stripe. Card details never reach this application; it stores only a Stripe customer id and a credit balance.
- Email delivery — transactional email (password resets, job completions) is sent through a third-party provider.
- AI processing — job input and assistant messages are sent to whichever AI provider you configure. Say which one, and link to their terms.
Sections you will need
- What data you collect and why
- Your legal basis for processing it
- Who you share it with (sub-processors, and what each one does)
- How long you keep it, and what happens on account deletion
- What rights users have and how they exercise them
- Cookies and analytics, if you add any
- International transfers, if your users and servers differ
- How to contact you about any of the above
Edit this page at src/app/(legal)/privacy/page.tsx.