Privacy Policy

Account data. When you sign up we store your email address and, if you use a third-party sign-in (Google, Apple, Microsoft, or GitHub), the basic profile the provider shares — typically your name, email, and avatar. Authentication is handled by Supabase; we never see or store your third-party passwords.

Your creative content. The prompts you submit, the media you upload, and the images, video, and audio you generate are stored on Supabase storage so your library and history work. Files you generate get stable URLs so you can view and share them.

Billing data. Payments are processed by Stripe. Pitron never stores your card number — we keep only what we need to run your account: your Stripe customer reference, subscription status, invoices, and the credit ledger that records what each generation consumed.

Usage and diagnostics. We use PostHog (EU Cloud) for product analytics, Google Analytics 4 and Google Tag Manager for site analytics. Google Tag Manager also sends a data-minimal Google Ads conversion signal after a server-confirmed signup; it does not send an email address, user ID, or payment details in that browser event. We also use Vercel Analytics / Speed Insights for performance. Sentry captures technical details about errors. These tools set first- and third-party cookies or similar identifiers. We use them to fix bugs and understand the product — not to run paid ads from this site.

• Running generations and showing you your results and history.
• Managing your account, subscription, and credit balance.
• Sending transactional email (receipts, important account or policy notices).
• Keeping the service reliable and diagnosing failures.
• Enforcing our Terms of Service, including abuse and fraud prevention.

We do not use your prompts, uploads, or outputs to train our own AI models, and we do not sell your personal data.

Pitron runs on a small set of infrastructure providers that process data on our behalf:

• Supabase — authentication, database, and file storage.
• Stripe — payment processing; your card details go directly to Stripe.
• Vercel — application hosting and content delivery.
• PostHog (EU Cloud) — product analytics.
• Google Analytics 4, Google Tag Manager, and Google Ads conversion measurement — site analytics, tag delivery, and a data-minimal server-confirmed signup signal. Pitron does not enable enhanced-conversion matching or send customer data to Google Ads.
• Vercel Analytics and Speed Insights — performance telemetry.
• Sentry — error tracking.
• AI model providers (for example, models hosted via fal.ai) — to run a generation, your prompt and any input media are sent to the provider serving the model you selected. Providers process this data to produce your output and under their own privacy terms.

These providers may store data outside your country. Where EU data is transferred internationally, we rely on our providers' standard safeguards (such as EU standard contractual clauses).

Your prompts, uploads, and generations stay in your account until you delete them or your account is deleted, so your library keeps working. Billing records are retained as long as required for accounting and tax purposes. Analytics and error logs are retained on the schedules of PostHog and Sentry, then discarded. When you delete your account, we delete the personal data associated with it, except what we're legally required to keep.

You can access, correct, export, or delete your personal data. For anything not available in the product itself — including full account deletion — email hello@pitron.aiand we'll respond within 7 business days.

If you are in the EU/EEA or UK, you additionally have the rights granted by the GDPR: access, rectification, erasure, restriction of processing, data portability, and objection. Our legal bases for processing are performance of our contract with you (running the service), legitimate interests (security, product improvement), and legal obligations (billing records). You also have the right to lodge a complaint with your local data protection authority.

Pitron uses first-party cookies and local storage that are necessary for the service — your sign-in session, experiment assignment, and interface preferences — plus analytics cookies from Google Analytics / Tag Manager, Google advertising, PostHog, and Vercel as described above. Details are in the Cookie Notice.

Data is encrypted in transit, access to production systems is restricted, and payment credentials never touch our servers. No system is perfectly secure, but if a breach affects your personal data we will notify you as required by law.

Pitron is for adults — you must be at least 18 to use it, and we don't knowingly collect data from anyone under 18. If you believe a minor has created an account, email hello@pitron.aiand we'll delete it.

We'll update this policy as the service evolves and revise the “Last updated” date above. For material changes we'll notify you by email or in the product before they take effect.

For any privacy question or request, contact hello@pitron.ai.