← Back to home

Privacy Policy

Effective date: May 20, 2026 · AllShift AI LLC

1. Who We Are

AllShift AI LLC operates ShapeShift AI at shapeshiftcnc.com. This Privacy Policy explains how we collect, use, and protect your information. Questions? Contact us at t.allman@kpsllc.org.

2. Information We Collect

  • Account data: Email address and password (hashed) when you register.
  • Usage data: AI generation requests, canvas interactions, feature usage, and session metadata.
  • Design data: SVG shapes and designs you save to the cloud.
  • Payment data: Processed by Stripe. We store only a Stripe customer ID — we never see raw card numbers.
  • Voice data: Audio is processed locally in your browser using the Web Speech API; we do not transmit raw audio to our servers.
  • Log data: IP address, browser type, pages visited, and timestamps for security and analytics.
  • Referral data: If you arrive via a referral link, we record the referral code.

3. How We Use Your Information

  • Provide, operate, and improve the Service.
  • Process payments and manage subscriptions.
  • Send transactional emails (account confirmation, password reset, billing receipts).
  • Enforce our Terms of Service and prevent abuse.
  • Analyze aggregate usage patterns to improve features.

We do not sell your personal data to third parties. We do not use your designs to train AI models without explicit consent.

4. Cookies and Tracking

We use essential session cookies to keep you signed in. We may use privacy-respecting analytics (e.g., Plausible or similar) that do not use third-party tracking cookies or fingerprinting. We do not run advertising trackers.

5. Third-Party Services

  • Supabase: Database and authentication. Data stored in the US.
  • Stripe: Payment processing. Subject to Stripe's Privacy Policy.
  • Anthropic: AI generation. Prompts are sent to Anthropic's API. Subject to Anthropic's Privacy Policy.
  • Resend: Transactional email delivery.
  • Vercel: Hosting and edge infrastructure.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate fraud-prevention purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, email us at t.allman@kpsllc.org. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

9. Security

We use industry-standard security measures including HTTPS, hashed passwords, and row-level security in our database. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect.

11. Contact

AllShift AI LLC · Olathe, Kansas, USA · t.allman@kpsllc.org

Terms of Service← Home