Privacy Policy

Last updated: 23 September 2026

What we collect

Account email and auth metadata (via Supabase Auth when you sign in)
Purchase records from checkout providers (e.g. Gumroad / Stripe)
Product usage needed to run the service (device registration, agent task metadata)
Cookie-free acquisition events on personalised workflow snapshots (snapshot viewed and audit checkout clicked). These events store campaign tokens and the snapshot slug, not email, IP address, user agent, or private query values.
Standard web logs (IP, user agent) for security and reliability

We do not sell personal data. We do not train public models on your private agent content.

If you supply third-party API keys, they are used to call those providers on your behalf. Treat keys as secrets; rotate if exposed.

Infrastructure may include Vercel (hosting), Supabase (auth/db), Gumroad/Stripe (payments), and email providers for transactional messages.

You can request access or deletion of account data by emailing dropshipit369@gmail.com. We respond within a reasonable period.

Joel Mcvilly · Melbourne, Australia · dropshipit369@gmail.com