Privacy Policy

We collect account details such as your name, email address, workspace membership, and authentication identifiers. We also store the app metadata, screenshots, generated assets, API activity, and support messages you choose to provide.

When you connect a store or developer service, we store the credentials and identifiers needed to perform the actions you request. Billing providers send us membership and subscription status; we do not store full payment-card details.

When you connect an AI client, we process its scoped tool requests, task status, approval decisions, and results. We do not require store private keys, service-account JSON, API keys, or pairing codes to be placed in the AI conversation.

We use this information to authenticate you, operate your workspace, generate and translate content, publish changes you approve, provide support, prevent abuse, measure service reliability, and administer subscriptions.

We do not sell personal information or use your private app content to advertise to you.

We use vetted infrastructure, authentication, AI, storage, monitoring, and billing providers to operate the product. These include Google Cloud and Firebase, WorkOS for connected-agent OAuth, AI model providers used for requested generation, and Whop for subscription administration. Data may be processed in countries where these providers operate under their contractual safeguards.

If you connect ChatGPT, Claude, or another third-party AI client, that provider receives the tool inputs and results needed for the requests you make through it. Its handling of conversation data is governed by your agreement and settings with that provider.

We restrict access by workspace and role, keep sensitive credentials on server-side systems, and encrypt supported store credentials before storage. No internet service is risk-free, so you should grant only the store permissions needed for your workflow.

We retain account data while your account is active and as needed to provide the service. Short-lived agent task records carry an expiry of no more than seven days. You can permanently delete your account from Settings. Limited fraud-prevention, transaction, or legal records may be retained when required.

You can update account information, disconnect integrations, remove project content, or delete your account. Depending on where you live, you may also request access, correction, export, restriction, or deletion of personal information.

Privacy questions and rights requests can be sent to privacy@appstorecopilot.com.