Privacy Policy

Summary

This policy explains what we collect, why we collect it, and how you can control your data. Heuria is designed with privacy in mind.

What we collect

We collect only what is needed to run the service and support you.

• Account data: Email, name, optional avatar, authentication identifiers, and session data.
• Product data: Uploaded images you choose to analyze, auto generated tags, scores, analysis text, project names, and export metadata.
• Payments: Subscription status and billing metadata from Stripe or PayPal. We do not store card numbers.
• Usage analytics: Events like uploads, analysis started, export triggered, subscription state, device and browser info in aggregate, and error logs.
• Support: Messages you send through the contact form or email.

Why we collect it

• Provide and secure the service.
• Run analysis and generate results.
• Count starter credits and manage subscriptions.
• Improve quality and fix issues.
• Send transactional emails like receipts and password resets.
• Send product updates if you opt in to marketing.

Legal bases for EU and UK users

• Contract for delivering the service you requested.
• Legitimate interests for product improvement and fraud prevention.
• Consent for optional marketing and model training opt in.
• Legal obligation for tax and accounting records.

Third party services

We use trusted vendors to run Heuria. Typical vendors include Supabase for auth and storage, Stripe and PayPal for payments, an email provider for notifications, and analytics or error monitoring to improve reliability. Their use of data is governed by their own privacy policies.

Storage and retention

• Files and analysis data live in our cloud storage and database.
• You can delete uploads inside the app. We remove them from active storage promptly. Backups cycle on a schedule.
• Account and billing records are kept while your account is active and as required by law after closure.

Data access and control

You can view, access, edit, or delete your personal data for many parts of the service via Settings. You may have additional rights depending on your region.

• Access, correction, and deletion of your data.
• Download a copy of your data where feasible.
• Opt out of marketing at any time.
• Toggle model training opt in or opt out in Settings.
• If you are in the EEA or UK, you can object or restrict certain processing and complain to your data protection authority.

Security

We use encryption in transit, access controls, and least privilege for staff accounts. No method is perfect, so we cannot guarantee absolute security. Report issues to hello@heuria.io.

Children

The service is not directed to children under 13. If we learn that a child under 13 has created an account, we will delete it.

International transfers

Data may be processed in the United States or other countries where our vendors operate. We use appropriate safeguards for transfers where required.

Cookies and local storage

• Essential cookies or local storage keep you signed in and secure the session.
• Analytics cookies are limited and used to understand product usage in aggregate.
• You can control cookies in your browser, but the app may not work without essential ones.

AI and training

• By default we do not use customer content to train foundation models.
• You can opt in to allow us to use your uploads and AI outputs to improve quality. This setting is off unless you enable it.
• We may use aggregated and de identified usage metrics to improve the service.

Changes and contact

When the policy changes, we will update the date at the top and, for material changes, notify you in the app or by email.

Privacy questions or requests - Email: hello@heuria.io