1. Introduction
Welcome to SuperAIGenerator.com ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. This policy applies to all users regardless of location.
Data Controller: Stralen Digital LLC. For privacy-related inquiries, please contact us.
2. Information We Collect
2.1 Information You Provide
- Account information: Email address when you create an account
- AI tool inputs: The content you provide for generation (text prompts, scripts, etc.)
- Contact form: Name, email, and message when you contact us
- Usage data: Tool usage counts, generation history, and preferences
- Billing information: Subscription plan, billing status, payment history, and invoice records (processed by Stripe; we do not store card details directly)
2.2 Information Automatically Collected
- IP address (anonymized for analytics)
- Browser type and version
- Pages visited and time spent on each page
- Referring website addresses
- Device type (desktop/mobile), operating system, and screen resolution
- Geographic location (country and city, derived from IP address)
3. Legal Basis for Processing (GDPR Article 6)
We process your data under the following legal bases:
- Contract performance (Art. 6(1)(b)): Processing your AI tool inputs to generate content, managing your account, and providing the service you requested
- Consent (Art. 6(1)(a)): Loading Google Analytics cookies for website analytics, and loading Google Translate for site translation. You may withdraw consent at any time through our cookie consent banner
- Legitimate interest (Art. 6(1)(f)): Preventing abuse, ensuring security, rate limiting, fraud detection, and improving our service based on aggregated usage patterns
- Legal obligation (Art. 6(1)(c)): Retaining certain data to comply with applicable laws and responding to valid legal requests
4. How We Use Your Information
- Providing and improving our AI tools
- Generating unique content based on your inputs
- Responding to your inquiries and support requests
- Analyzing website usage to improve user experience (only with consent)
- Preventing abuse, ensuring security, and enforcing rate limits
- Complying with legal obligations
5. Data Retention
We retain your data for the following periods:
- Account data (email, metadata): Until you delete your account, then within 30 days
- AI tool inputs/outputs: Not stored permanently; processed in real-time and discarded
- Usage logs: 90 days for security and abuse prevention, then anonymized
- Contact form submissions: 12 months, then deleted
- Analytics data: 26 months (Google Analytics default), then aggregated/anonymized
- Cookie consent records: Retained for the duration of your consent
- Payment and billing records: 7 years from the transaction date (required for tax and accounting compliance)
6. Cookies and Tracking
6.1 Essential Cookies
These cookies are necessary for the website to function and cannot be disabled:
- XSRF-TOKEN: CSRF protection (duration: 1 hour)
- sai_cookie_consent: Stores your cookie consent preferences (duration: persistent until revoked)
- Supabase auth tokens: Authentication session management (duration: until logout)
6.2 Analytics Cookies (requires consent)
- _ga, _ga_*: Google Analytics visitor identification (duration: 2 years)
6.3 Third-Party Cookies (loaded after consent)
- googtrans, NID: Google Translate language preferences (duration: 1 year). Loaded only after you accept analytics or all cookies
7. Third-Party Services
We use the following third-party services that may process your data:
- Supabase - Authentication and database (stores email, usage logs, IP, location). Hosted in the United States
- Groq API - AI content generation (your prompts are sent for processing). Hosted in the United States
- Magic Hour API - AI video generation (your video prompts are sent). Hosted in the United States
- ip-api.com - IP geolocation (your IP address is sent to determine country/city)
- Datamuse API - Word synonyms (text fragments sent for synonym lookup)
- Microsoft Edge TTS - Voice generation (your text is sent for speech synthesis). Hosted in the United States
- Google Analytics - Website analytics (only with your consent). Hosted in the United States
- Google Translate - Site translation (only with your consent). Hosted in the United States
- Google Fonts - Typography
- Font Awesome - Icons
- Render.com - Backend hosting. Hosted in the United States
- Hostinger - Static file hosting
- Stripe, Inc. - Payment processing (receives email, payment method details, billing address, and transaction history). PCI-DSS Level 1 compliant. Stripe Privacy Policy. Hosted in the United States
8. International Data Transfers
Your data may be transferred to and processed in the United States and other countries where our third-party service providers operate. These countries may have different data protection laws than your country of residence. When we transfer data internationally, we rely on the following safeguards:
- The EU-US Data Privacy Framework for transfers to US-based providers
- Standard Contractual Clauses where applicable
- Your explicit consent where required
9. Your Rights
9.1 GDPR Rights (EEA/UK Users)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under GDPR:
- Right of Access (Art. 15): Request a copy of all personal data we hold about you
- Right to Rectification (Art. 16): Request correction of inaccurate data
- Right to Erasure (Art. 17): Request permanent deletion of your account and all data
- Right to Restrict Processing (Art. 18): Request that we limit how we use your data
- Right to Data Portability (Art. 20): Download your data in a machine-readable format
- Right to Object (Art. 21): Object to processing based on legitimate interest
- Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time (withdrawal does not affect the lawfulness of prior processing)
To exercise these rights, use the tools in your Profile page or contact us. We will respond within 30 days.
9.2 CCPA Rights (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, purposes, and third parties with whom we share it
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
Categories of Personal Information Collected: Identifiers (email), Internet activity (usage data, browsing history), geolocation data (country/city from IP), and inferences (usage patterns).
Business Purpose: We collect and use personal information to provide, maintain, and improve our services, prevent fraud, and comply with legal obligations.
To exercise your CCPA rights, contact us. We will verify your identity before processing your request.
10. Automated Decision-Making
Our AI tools generate content based on your inputs using machine learning models. This constitutes automated processing under GDPR Art. 22. The logic involved is: your text input is processed by large language models (hosted by Groq API) which generate relevant output based on patterns learned during training. The significance is that the output is algorithmically generated and may not reflect your intended meaning. You have the right to request human review of any automated decision that significantly affects you. For full transparency on our AI practices, see our AI Disclosure page.
11. Data Security
- All data is transmitted over encrypted HTTPS connections (TLS 1.2+)
- Row Level Security (RLS) ensures users can only access their own data
- Two-factor authentication (2FA) is available for account security
- Content you generate is not stored permanently on our servers
- Rate limiting and IP blocking prevent abuse
12. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on this page with an updated "Last updated" date. For significant changes, we will display a prominent notice on our website.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us.
Data Controller: Stralen Digital LLC