Legal
Privacy Policy
Last updated: June 30, 2026
1. Information We Collect
We collect only what's necessary to provide the Service:
- Account data: your email address (provided by Supabase Auth).
- API usage data: number of renders, timestamps, and endpoint type (template/screenshot). We do not log the content of your API calls except temporarily during image generation and caching.
- Billing data: handled entirely by Paddle. We do not see or store your payment card details, billing address, or tax IDs. Paddle shares with us your email, plan, and subscription status.
2. How We Use Data
- To authenticate you and enforce rate limits.
- To show your plan details and usage statistics in your dashboard.
- To send transactional emails (password reset, account confirmations) via Resend.
- To improve the Service using aggregate usage trends, never individual data.
We do not sell your personal data or use it for targeted advertising.
3. Temporary Data Processing
Template rendering: You send us text (title, author, etc.) and an optional image URL. This data is used in-memory to build an SVG and render a PNG. We do not store the input data after the request completes.
URL screenshots: The URL you provide is visited by a headless browser. We cache the resulting screenshot for performance. We do not permanently store the page content.
Generated images: You control where the output images are used.
4. Data Retention
Account and usage data is retained as long as your account is active.
Upon account deletion, we remove your email, API keys, and associated usage logs within 30 days. Billing records may be retained longer per legal requirements by Paddle.
5. Third-Party Services
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database & authentication | Email, hashed password, API key, usage count |
| Cloudflare Workers | API hosting & caching | API call metadata, rendered images (cached) |
| Paddle | Payment processing | Email, plan, subscription ID |
| Resend | Transactional emails | Email address |
6. Cookies
Our website uses Supabase Auth, which may set strictly necessary session cookies for login functionality. We do not use tracking cookies, analytics cookies, or third-party ad cookies.
7. Your Rights
Depending on your location, you may have rights to access, correct, delete, or port your personal data. To exercise these rights, email us at [your email]. We will respond within a reasonable timeframe.
8. Children's Privacy
Ogify is not directed at children under 13, and we do not knowingly collect data from them.
9. Changes to This Policy
We may update this Privacy Policy. Significant changes will be notified via email or on our website.
10. Contact
For privacy concerns, contact: [your email]