.palettaPrivacy Policy.
We collect only the information needed to operate .paletta accounts, provide AI features, and process purchases. This page describes our current product architecture.
Information on this page reflects .paletta's current implementation. Legal and billing policies require operator review before live commercial launch.
Information we process
When you create an account, we store your email address, verification status, a password hash if you use password login, linked OAuth provider identifiers, and account/session records. Your profile may include a display name, short bio and a photo you upload. We also keep your credit balance, credit history, purchase identifiers, and subscription state.
AI requests
The prompts and conversation context you submit are sent to the AI service used to generate your answer (currently Cloudflare Workers AI). Avoid including passwords, private API keys, payment information, or highly sensitive personal information. We do not promise AI-generated content is private beyond the applicable provider and infrastructure policies.
Local projects and chat history
The current developer workspace stores project labels and chat histories in your browser's local storage, rather than syncing full conversations to our account database. Clearing your browser storage or using another device may remove or hide this local history. Credits, payment events, account information and uploaded profile images are stored server-side.
Payments and providers
Payments and recurring subscriptions are processed through Stripe. We store transaction and subscription identifiers and credit ledger entries, but do not receive or store complete card numbers. Email verification and password-recovery messages are sent through Resend. Connected identity providers such as Google or Discord provide identifiers used to verify and link your account.
Cookies and browser storage
We use secure, HttpOnly account session cookies for login and local storage for workspace projects. See our Cookies & Storage page for details. We do not currently describe third-party advertising cookies as part of the .paletta product.
Retention and requests
Account and billing records are retained as needed to operate the product, resolve disputes, meet legal obligations and protect against abuse. Exact retention periods may vary with provider and legal requirements. Contact support to request account-data access, corrections, or deletion, subject to applicable obligations. A deletion request may not remove payment records we must retain.
Security and changes
We use access controls, hashed passwords, restricted Cloudflare services and payment-webhook verification, but no service can guarantee absolute security. We may update this policy as the service changes and will publish its latest version here. For privacy questions, reach out through the Support page.