Privacy Policy

Last updated: April 2026

1. What we collect

Account info (email, display name, optional shop niche), billing info handled by Stripe, content you upload or generate, and basic usage analytics (page views, tool usage, device/browser).

2. How we use it

To provide and improve the Service, process payments, send transactional and (optional) marketing emails, prevent abuse, and meet legal obligations.

3. AI providers

Prompts and uploads sent to AI tools are processed by trusted providers (e.g. Google Gemini via Lovable AI Gateway) under their data terms. We don't sell your data, and we don't use your private uploads to train public models.

4. Storage

Uploads and generated assets are stored in private buckets accessible only via signed URLs tied to your account. We follow a download-first philosophy and you can delete generated assets at any time.

5. Cookies & analytics

We use essential cookies for authentication and the following analytics services to understand product usage and improve reliability:

• Google Analytics 4 / Google Tag Manager — aggregate page views, feature clicks, and conversion events (e.g. begin_checkout). No email, prompt text, uploads, or generated content is sent.
• PostHog — product analytics and session replay. All form inputs, text content, chat messages, prompts, uploads, and cross-origin iframes are masked in every replay; only marketing page copy remains visible. We identify authenticated users by internal user ID with non-PII plan properties (e.g. plan tier).
• Microsoft Clarity — heatmaps and session replay for UX debugging, loaded with default input/text masking.
• Meta Pixel (Facebook) — advertising attribution, campaign measurement, and audience optimization for paid social campaigns. We send standard events such as PageView, CompleteRegistration, and a custom landing-page CTA event. We never send email addresses, names, prompts, uploaded content, or other personal data to Meta. The Meta Pixel is not initialized when your browser communicates Do Not Track (DNT) or Global Privacy Control (GPC).

You can opt out at any time by using your browser's Do Not Track / GPC signal, blocking analytics cookies at the browser level, or emailing hello@everalice.studio to request removal from all analytics tools.

6. Your rights

You can access, export, correct, or delete your data at any time. For GDPR/CCPA requests email hello@everalice.studio and we'll respond within 30 days.

7. Email preferences

Unsubscribe from marketing emails anytime via the link in every email or your email preferences page. Transactional messages (receipts, security) cannot be disabled while your account is active.

8. Children

The Service is not intended for users under 16. We don't knowingly collect data from children.

9. Changes

We'll notify you of material changes by email or in-app banner.

10. Contact

Questions about your data? Email hello@everalice.studio.