Privacy Policy

1. Controller and Scope

Deliteful is the controller for account and service data processed through the website and application.

For payment transactions, Lemon Squeezy acts as Merchant of Record and processes billing data under its own legal obligations.

2. Information We Collect

Account Data

Email address, authentication identifiers, and account metadata needed to provide login and account access.

Usage and Operational Data

Job metadata, credit usage, workflow metadata, operational logs, and diagnostics used for service operation, security, abuse prevention, and troubleshooting.

Files You Upload

Files are stored temporarily for processing and output delivery. Files are automatically deleted according to plan retention windows.

Billing Data

Billing and payment processing are handled by Lemon Squeezy. We do not store full payment card numbers.

3. How We Use Information

• Provide and secure the Service
• Process jobs and deliver outputs
• Manage subscriptions, credits, and account state
• Detect abuse, fraud, and security incidents
• Comply with legal obligations and enforce terms

4. Legal Bases (Where Applicable)

• Performance of a contract
• Legitimate interests (security, reliability, abuse prevention)
• Compliance with legal obligations
• Consent, where required by law

5. Cookies and Similar Technologies

We use essential cookies and session technologies required for login and security. See our Cookie Policy for details.

6. Sharing and Disclosure

We share data with service providers only as needed to operate the Service.

• Cloudflare (DNS, security, temporary object storage)
• Supabase (authentication and database)
• Modal (job execution)
• Vercel (hosting and delivery)
• Lemon Squeezy (billing and invoicing)

We do not sell personal information or share personal information for cross-context behavioral advertising.

7. International Transfers

Personal data may be processed outside your country of residence, including the United States. We rely on appropriate legal safeguards where required, such as contractual protections offered by providers.

8. Data Retention

Uploaded files and generated outputs are automatically deleted under plan retention windows. Account, billing, and compliance records are retained only as long as needed for service delivery, legal obligations, dispute resolution, and fraud prevention.

9. Regional Privacy Rights

Depending on your jurisdiction, you may have rights to access, correction, deletion, portability, and objection/restriction.

• EEA/UK/Switzerland users may have GDPR-style rights and complaint rights with a supervisory authority.
• California and other applicable US state residents may have rights to know, access, delete, and correct personal information.

You can submit requests via our support page.

10. Security

We apply technical and organizational security controls appropriate to our service model, including HTTPS, access controls, and infrastructure provider safeguards.

11. Children

The Service is not intended for children under 16, and we do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date and, where appropriate, additional notice.

13. Contact

Privacy questions and requests can be submitted through our support page.