Privacy Policy
Last updated: May 25, 2026
Agent DNA Marketplace ("we", "us") respects your privacy. This policy describes what we collect, how we use it, and your rights.
Information we collect
- Account data — name, email, password hash, profile image.
- Authentication metadata — sign-in provider (Google, Apple, email), IP address, login timestamps.
- Purchase data — products purchased, license type, amount, billing country (we do not store full card numbers; Stripe handles payment data).
- Usage data — pages visited, features used, performance and error analytics.
- Content you provide — inputs to workflows, support messages, reviews.
How we use it
To operate the marketplace, deliver purchases, prevent fraud and abuse, provide support, send transactional and (with consent) marketing emails, and improve the product.
Service providers (processors)
We share the minimum data necessary with these processors under written agreements:
- Supabase — authentication, database, file storage.
- Cloudflare — hosting, edge runtime, DDoS protection.
- Stripe — payment processing.
- Resend — transactional and authentication emails.
- Google & Apple — OAuth sign-in (if you choose those providers).
- Lovable AI Gateway / Anthropic / ElevenLabs — AI model inference where features require it.
We do not sell your personal data.
Cookies
We use essential cookies for authentication and session management. We may use analytics cookies to understand usage. Where required by law, we will request your consent before non-essential cookies are set.
Your rights (GDPR / CCPA)
You may request access to, correction of, export of, or deletion of your personal data. California residents may exercise rights under the CCPA, including the right to know and the right to delete. Contact us to exercise these rights.
Data retention
Account data is retained while your account is active and for up to 30 days after deletion (for backups and fraud prevention). Purchase and tax records are retained for the period required by law (typically 7 years).
International transfers
We may transfer data to the United States and other jurisdictions where our processors operate, under Standard Contractual Clauses or equivalent safeguards.
Children
The service is not directed to users under 16. We do not knowingly collect personal data from children.