Privacy Policy
Last updated: February 2026
1. Overview
ppl.studio (“we,” “our”) respects your privacy. This policy describes what data we collect, how we use it, and your choices. By using our service, you agree to this policy.
2. Data We Collect
We collect: (a) Account data — email, password (hashed), and profile information you provide when signing up or updating your account; (b) Content you create — experts (personas), props, prompts, and AI-generated images you create in the Service; (c) Usage data — how you use the product (e.g. pages visited, actions taken) to operate and improve the Service; (d) Payment data — billing is handled by Stripe; we do not store full payment card details; (e) Optional API keys — if you provide your own Gemini API key, we use it only to fulfill your requests and do not store it longer than necessary for that purpose.
3. How We Use Your Data
We use your data to: provide, secure, and improve the Service; process your requests and generate content; communicate with you about your account or the Service; comply with legal obligations; and enforce our terms. We do not sell your personal information to third parties for advertising.
4. Storage and Security
Your data is stored using industry-standard providers (including Supabase for database and auth). We apply reasonable technical and organizational measures to protect your data. No system is completely secure; we cannot guarantee absolute security.
5. Third-Party Services
We use: Supabase for authentication and database hosting; Google (Gemini) for AI text and image generation when you use our hosted features or provide your own API key; Stripe for payment processing. Each has its own privacy practices; we encourage you to review their policies. We do not control how these parties use data they collect independently.
6. Cookies and Similar Technologies
We use cookies and similar technologies for session management, security, and to remember your preferences. You can adjust your browser settings to limit or block cookies; some features may not work fully if you disable them.
7. Data Retention
We retain your account and content for as long as your account is active. After you delete your account, we may retain certain data as required by law or for legitimate business purposes (e.g. resolving disputes, enforcing terms) for a limited period, after which it is deleted or anonymized.
8. Your Rights
Depending on your location, you may have the right to: access, correct, or delete your personal data; restrict or object to certain processing; data portability; and withdraw consent where processing is consent-based. You can update or delete account and content from within the Service. To exercise other rights or ask questions, contact us. You may also have the right to lodge a complaint with a supervisory authority.
9. Children
The Service is not intended for users under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us so we can delete it.
10. International Transfers
Your data may be processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfer. We take steps to ensure your data receives an adequate level of protection where required by law.
11. Changes to This Policy
We may update this policy from time to time. We will post the revised policy and update the “Last updated” date. Material changes may be communicated via the Service or email. Your continued use after the effective date constitutes acceptance.
12. Contact
For privacy-related questions or requests, contact us at the email or address provided on our website or in the Service.