Privacy Policy

We collect only what we need to run SpicyReplies: • Email address — when you create an account • Generated content — the prompts you submit and the AI responses produced • Payment metadata — transaction records via Stripe (we never see or store your card number) • Technical data — IP address, browser type, device info, and usage logs for security and debugging

Your data is used to: • Operate and improve the SpicyReplies service • Process your payments and manage your shot balance • Prevent abuse, fraud, and unauthorized access • Send transactional emails (receipts, password resets) — no marketing spam

We share your data only with the third-party providers that power our service: • Supabase — database and authentication • Vercel — hosting and edge infrastructure • Stripe — payment processing • KIE AI — AI generation infrastructure • Google Analytics by Google LLC — website analytics, only loaded with user consent Each provider receives only the data necessary to perform their function. We do not sell your data. Ever.

Your account data and generated content are retained for as long as your account is active. If you delete your account, your data is removed within 30 days. Payment records are retained for as long as required by applicable law (typically 7 years).

You have the right to: • Access the data we hold about you • Correct inaccurate information • Delete your account and associated data • Export your data To exercise any of these rights, email help@spicyreplies.com. We will respond within 14 days.

We use two types of cookies: • Essential cookies — required for authentication sessions and secure login state. These are always active as the service cannot function without them. • Analytics cookies — Google Analytics, used to understand how visitors use SpicyReplies and to improve the service. These are only active with your explicit consent. We do not use advertising cookies or tracking pixels.

We use a cookie consent banner to give you control over optional analytics cookies. Essential cookies are always active as they are required for login and session management. Analytics cookies are only loaded after you explicitly accept them via the consent banner. You can change your preference at any time by clearing your browser's localStorage (or cookies) and revisiting the site — the consent banner will reappear.

We take security seriously: • All data is transmitted over HTTPS • Passwords are hashed using industry-standard algorithms (never stored in plain text) • Database access is protected by row-level security (RLS) via Supabase • We conduct regular security reviews No system is 100% secure. If you discover a vulnerability, please report it to help@spicyreplies.com.

SpicyReplies is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover that a user is under 18, we will delete their account and all associated data immediately.

Questions about this Privacy Policy? Email us at help@spicyreplies.com. We'll respond within 24 hours.