Privacy Policy

We collect only what we need to run the product:

• Account data — your name, email, password hash, and authentication tokens issued by Supabase.
• Workspace inputs — URLs and raw text you submit during brand ingestion. We fetch and store the extracted page content so the Brand Bible can be recompiled deterministically.
• Generated content — pages, drafts, scores, and edit history Pillar Engine produces on your behalf. You own this output (see the Terms).
• Operational telemetry — request logs, error traces, billing events, and per-workspace usage counters needed to enforce plan limits.

We do not buy data from third-party brokers, and we do not run ad-tech trackers on authenticated pages.

• Run the product: ingest sources, generate and score pages, surface results.
• Improve your brand voice model. Edits you make to drafts feed back into the learnings pipeline for your workspace. We do not pool your edits with other workspaces or use them to train shared foundation models.
• Bill you and reconcile Stripe payments.
• Send transactional email (magic links, invitations, billing receipts).
• Investigate abuse, debug regressions, and answer support requests you raise.

We rely on the following sub-processors to operate the service. Each has its own privacy policy that governs how it handles data we send.

• Anthropic — runs the Claude models that draft and score your pages. Prompts and completions transit Anthropic; we operate under their commercial zero-retention terms where available.
• Supabase — primary database and authentication. Stores your account record, workspace state, drafts, and embeddings.
• Stripe — payment processor for plan subscriptions. We never see or store full card numbers.
• Vercel — application hosting and edge runtime. Request logs may briefly transit Vercel infrastructure.
• Resend — transactional email delivery.
• Inngest — durable job runner for ingestion and generation pipelines.
• Firecrawl — page-scraping infrastructure used during brand ingestion. Only the URLs you submit are sent.

• Workspace data is retained for as long as your account is active.
• On account deletion we purge your workspaces, Brand Bibles, drafts, and embeddings within 30 days. Billing records are kept for 7 years to satisfy tax law.
• Server logs are kept for up to 30 days. Aggregated, non-identifying metrics may be retained longer for capacity planning.

Whether you live in the EU/EEA (GDPR), the UK, or California (CCPA / CPRA), the following rights apply:

• Access — request a copy of the personal data we hold about you.
• Correction — fix anything inaccurate via your workspace settings or by writing to us.
• Deletion — request that we erase your account and associated data, subject to the legal-retention carve-outs above.
• Portability — export your Brand Bible and generated pages in machine-readable form.
• Objection — opt out of any non-essential processing. We do not sell personal information.

To exercise any of these, email alejandro.trevinom96@gmail.com. We aim to respond within 30 days.

Data in transit is TLS-encrypted. Data at rest is encrypted by Supabase using AES-256. Production secrets are scoped per environment and never bundled into client builds. We do not promise perfection — if we ever suffer a breach affecting your data, we will notify you in line with applicable law.

Pillar Engine is not directed to people under 16. We do not knowingly collect data from children.

If we make a material change we will update the date at the top of this page and, for existing account holders, send an email notification at least 14 days before the change takes effect.

Questions, requests, or complaints: alejandro.trevinom96@gmail.com.