Privacy Policy

Last updated: May 2026

This Privacy Policy explains how

("we", "us") handles your information when you use our AI co-pilot for IT pros and developers — including chat, knowledge base, code playground, vendor pages, and our paid subscription plans.

1. Information we collect

email address, display name, language preference, and authentication tokens (email/password or Google sign-in).

credit balance, plan type (Free / Monthly / Yearly), refill timestamps, request counts, rate-limit events, and feature interactions.

the prompts you submit and the AI responses returned, stored so you can revisit your history.

. We store your Stripe customer ID, subscription status, plan, current period end, and price ID. We

see or store your full card number.

IP address (transient), browser, referrer, and pages viewed via Google Analytics 4.

2. How we use your information

Deliver AI answers and route requests to the appropriate model.

Track and enforce credit usage (25 credits per request) and plan limits.

Process subscriptions, renewals, refunds, and grant the 25,000 yearly bonus credits.

Detect abuse and enforce the 1 request / 2 seconds rate limit.

Send transactional emails (sign-up confirmation, payment receipts, plan changes).

Improve product quality and measure traffic.

3. Our plans and what gets stored

75 credits/day, 25 credits per request. We store your daily counter and reset it every 24h.

300 credits per cycle, refilled every 3 hours. We store cycle and refill timestamps.

300 credits per cycle (3h refill) + 25,000 bonus annual credits. We store the bonus grant ledger to avoid duplicate grants.

4. Sharing with AI providers

We do not sell your data, and your content is not used to train third-party base models.

5. Payments (Stripe)

All checkout, card storage, and renewals are handled directly by Stripe. Stripe's processing is governed by their own privacy policy. Webhooks notify us of payment success, renewal, or cancellation so we can activate, refill, or downgrade your plan accordingly.

6. Storage & security

Data is stored on Lovable Cloud (managed Postgres) with row-level security — your conversations, credits, and subscription rows are scoped to your user ID. Authentication uses industry-standard JWTs. Only you and authorized administrators can access your data.

7. Data retention

Conversations: kept until you delete them or close your account.

Billing records: kept as required by tax/accounting law (typically 7 years).

Analytics: aggregated, no personal identifiers retained beyond GA4 defaults.

8. Your rights (GDPR / CCPA)

. You can withdraw cookie consent via the banner shown on first visit.

9. Cookies & analytics

We use Google Analytics 4 and Google Ads conversion tags with Google Consent Mode v2. Tracking only fires after you click "Accept" on the cookie banner.

Stackvora.tech is not directed at children under 16.