Privacy Policy

Last updated: February 26, 2026

This Privacy Policy describes how Space64 ("we", "us", or "our") collects, uses, and protects your information when you use our website at space64.ai, our Chrome extension, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information as described in this policy.


1. Information We Collect

Account Information

When you sign up, we collect:

  • Google account data via OAuth: your name, email address, and profile picture
  • User profile created automatically upon signup

We do not store your Google password. Authentication is handled by Supabase Auth.

Content You Create

  • Canvases: node layouts, edges, and canvas metadata
  • Chat messages: conversations with the AI agent
  • Playbooks: workflow documents you author
  • Generated media: images and videos created through the Service, stored in our media storage

Usage Data

  • Analytics: We use PostHog to collect anonymized usage data such as page views, feature usage, and session data. PostHog respects Do Not Track settings.
  • Generation tracking: We track generation metadata (model used, duration, status) to improve the service. We do not inspect the content of your prompts beyond what is necessary to process your request.

Billing Information

  • Stripe: Payment processing is handled by Stripe. We do not store your credit card number. Stripe collects and processes payment information under their own privacy policy.
  • We store your Stripe customer ID and subscription status to manage your account tier.

Chrome Extension

Our Chrome extension ("Save to Space64") collects minimal data:

  • Authentication token: Read from your existing Space64 session cookie to authenticate requests. Cached locally in Chrome storage with automatic expiry.
  • Image URL and filename: When you right-click an image and select "Save to Space64", the image URL and filename are sent to our server to save the asset to your library.
  • Recent saves: The last 8 save attempts (filename, thumbnail, timestamp, status) are stored locally in your browser. This data never leaves your device.

The extension does not:

  • Track your browsing history
  • Collect data from pages you visit
  • Send any data to third parties
  • Run in the background when not actively used

2. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Process AI-generated media on your behalf
  • Manage your account and subscription
  • Improve the Service through anonymized analytics
  • Communicate with you about your account (e.g., billing, service updates)

We do not sell your personal information to third parties.


3. Third-Party Services

We use the following third-party services to operate:

| Service | Purpose | Data Shared | |---------|---------|-------------| | Supabase | Database, authentication, file storage | Account data, content, media files | | Anthropic (Claude) | AI agent conversations | Chat messages, canvas context | | Google (Gemini) | Video analysis | Video content when using read_video | | WaveSpeed | Image and video generation | Prompts, generation parameters | | Stripe | Payment processing | Billing information | | PostHog | Product analytics | Anonymized usage data | | Vercel | Hosting | Server logs, request metadata |

Each third-party service operates under its own privacy policy. We encourage you to review them.


4. Data Storage and Security

  • Your data is stored in Supabase (PostgreSQL) with Row Level Security (RLS) — each user can only access their own data.
  • Media files are stored in Supabase Storage with user-scoped access controls.
  • All data is transmitted over HTTPS.
  • Authentication tokens are JWTs with automatic expiry.

We take reasonable measures to protect your information, but no method of transmission or storage is 100% secure.


5. Data Retention

  • Account data: Retained as long as your account is active. You can request deletion at any time.
  • Generated media: Stored until you delete it or your account is terminated.
  • Chat history: Retained for your reference. You can delete chat sessions from the app.
  • Analytics data: Anonymized and retained per PostHog's retention policies.
  • Chrome extension local data: Stored on your device only. Cleared when you uninstall the extension or clear Chrome storage.

6. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Delete your account and associated data
  • Export your content (canvases, playbooks, media)
  • Opt out of analytics by enabling Do Not Track in your browser

To exercise any of these rights, contact us at waynedev9598@gmail.com.


7. Cookies

We use essential cookies for authentication (Supabase Auth session cookies). We do not use advertising or tracking cookies. PostHog analytics respects your browser's Do Not Track preference.


8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us and we will delete it.


9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.


10. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: waynedev9598@gmail.com

Website: space64.ai