Privacy Policy

1. What we collect

Account: your email address, and the sign-in links we send to it.

Connected accounts: when you connect an ad account or a social account, the access the platform grants us (its tokens, stored encrypted), and the data we read through it — such as account names and ids, campaigns, ad sets, ads, budgets, targeting, performance figures, and the posts we publish for you.

What you make and do: your prompts and settings, the files you upload, the results, your posts and schedules, the changes SuperGen proposes and applies with what they replaced, and your API keys (stored as hashes).

Billing: records of your plans, purchases and credits. Payment details are handled by Paddle.com, our online reseller; we never see your card.

Waitlist: the email address you leave, the plan you were looking at and the page you joined from.

Technical: your IP address and browser information, and server logs kept for troubleshooting and to stop abuse.

2. How we use it

To run the service: to sign you in, audit and change the accounts you connect as you instruct, make and publish what you ask for, keep your files, charge credits, and answer your questions. We email you sign-in links, notices about your plan and billing, and, if you joined the waitlist, the news that what you were waiting for has opened.

We do not sell your data, do not use it for advertising, and do not use your content or the data of your connected accounts to train AI models.

3. Google user data

SuperGen’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use data from Google Ads and other Google APIs only to provide the features you use in SuperGen, we do not transfer it except as needed to provide them, to comply with the law or as part of a merger or sale, and people do not read it except with your permission, for security, or to comply with the law.

4. Who processes it for us

Vercel hosts the site. Fly.io runs our servers. Neon stores the database. Cloudflare R2 stores files. A hosted Redis service holds the job queue. Resend sends our emails. Paddle.com, our online reseller, sells plans as the Merchant of Record and processes payments. AI model providers, such as fal.ai and kie.ai, directly or through our model router, receive your prompts and input files to make what you ask for. The ad and social platforms you connect receive the changes and posts you approve; Upload-Post publishes to the social platforms it covers for us.

Each of them receives only what it needs for its part, under its own privacy terms. Some of them process data outside your country, including in the United States.

5. Cookies

We use one cookie of our own, which keeps you signed in. Paddle sets its own cookies when you pay. We use no advertising or analytics cookies.

6. How long we keep it

Your account data is kept while your account exists. The data of a connected account is kept while it is connected; when you disconnect it, we stop accessing it. Billing records are kept as long as the law requires. When your account is deleted, we delete its data except what the law requires us to keep.

7. Your rights

To get a copy of your data, to correct it, or to have your account and data deleted, write to team@supergen.tech from the email address of your account. Where the law gives you further rights, such as to object, to restrict processing or to complain to a data protection authority, you can use them.

8. Children

SuperGen is not meant for anyone under 18, and we do not knowingly collect their data.

9. Changes and contact

We may update this policy; the date at the top shows the latest version. Questions: team@supergen.tech.