Privacy Policy
Last updated: 11/29/2025
This Privacy Policy explains how Deliteful (“we”, “our”, “us”) collects, uses, and protects personal information in compliance with GDPR, CCPA, and other global privacy standards. Deliteful is designed around predictable, deterministic file processing with no long-term storage of user-uploaded data.
1. Information We Collect
Account Information
When you create an account, we collect your email address, password hash, and optional profile data through Supabase authentication.
Billing Information
Payments are processed entirely by Lemon Squeezy. We never receive or store credit card numbers or billing credentials.
Usage & Diagnostic Data
We record tool usage, credit consumption, workflow execution, and general diagnostic logs. This helps us operate the Service, troubleshoot issues, and prevent abuse.
Uploaded Files
Files you upload are stored temporarily on Cloudflare R2 exclusively for processing via Modal serverless functions. Files are automatically deleted shortly after your job completes. We do not read, index, analyze, or store file content long-term.
2. How We Use Your Information
- Operate and maintain the Service
- Authenticate users and secure accounts
- Process the files you upload
- Enforce rate limits and prevent abuse
- Send essential transactional emails
- Comply with legal or regulatory requirements
3. Data Processing & Storage
All file processing occurs in isolated Modal compute environments. Files are stored only temporarily in Cloudflare R2 with automatic deletion. We do not use uploaded files for analytics, training, marketing, or any secondary purpose.
4. Third-Party Services
We rely on trusted infrastructure providers:
- Vercel — frontend hosting
- Cloudflare — DNS, security, R2 storage
- Modal — backend execution with ephemeral environments
- Supabase — authentication & database (RLS enabled)
- Lemon Squeezy — subscription billing & invoicing
5. Your Data Rights
You may request access, correction, export, or deletion of your personal data at any time. File-based content is not retained, so only account-level and billing data are subject to these requests.
6. Children
The Service is not intended for individuals under 16 years old.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Service after changes are published constitutes acceptance of the updated Policy.