Your information at PipScene.

01Who this notice covers

PipScene is operated by [Legal operator name] in California, United States. This notice covers our website, accounts, website-generation service and support. It does not serve as the privacy policy for a website you create and publish yourself.

Effective date: [Effective date]. Privacy contact: [Privacy email]. Mailing address: [Business mailing address].

02Information we collect

We collect information you provide, information created while we carry out your requests, and technical information needed to operate the service.

• Account information, such as your email address, sign-in details, profile information and workspace membership. If you use a supported sign-in provider, we receive the information it supplies for that sign-in.
• Project content, including business descriptions, prompts, conversations, uploaded images and clips, references, generated websites and media, revisions and your choices about them.
• Service records, including requests, credit reservations and adjustments, delivery history, error and security records, and device, browser, network or request information processed by our infrastructure.
• Purchase and billing records when paid features are available, such as the plan, billing period, payment status and payment-provider references. Card details are entered with the payment provider rather than in a project brief.
• Messages and information you send when asking for support, reporting a problem or discussing custom work.

03How we use information

We use information to create and secure accounts, carry out your instructions, generate and save work, provide previews and downloads, maintain project history, manage credits and billing, respond to requests, troubleshoot failures, prevent misuse and comply with applicable law.

We use account and contact information for service messages, such as security alerts, responses to your enquiries and billing notices. Any promotional messages are subject to the choices and unsubscribe instructions provided with them.

04Providers and AI processing

Providing the service requires sending relevant information to our infrastructure and AI providers. A generation request may include your instructions, relevant conversation context, uploaded references and existing website source. Only submit material you are entitled to share for this processing.

• Supabase provides authentication, database and file storage. Vercel hosts the application and provides isolated environments for generation and verification.
• OpenAI processes requests for conversation, direction, website creation and revisions, and image generation. Google Gemini processes video-generation requests. Older project workflows and associated records may also involve Anthropic.
• Stripe handles checkout and payment processing when paid purchases are enabled. Public paid checkout is not currently available.
• Enabled sign-in, email and security-verification services process the information needed for those functions. Where Cloudflare Turnstile is enabled, it processes browser and device signals to help prevent automated abuse.

05Access, sharing and processing locations

Projects are kept in private workspaces rather than published as public customer sites by PipScene. People authorized for your workspace can access information according to their permissions. Authorized operators and providers may access information where needed for service operation, support, security or legal obligations.

We may disclose relevant information to professional advisers, in response to a valid legal requirement, to protect rights and safety, or as part of a business transfer subject to applicable protections. Providers may process information in the United States and other countries. Provider retention, security and legal records can differ from the records held directly by PipScene; processing an AI request does not mean that every copy is immediately deleted.

When you follow an external link, use a separate provider service or publish your exported website, the relevant operator's practices also apply.

06Cookies and browser storage

PipScene uses cookies and browser storage. These help you sign in, carry a brief through sign-in and keep your appearance preference. They are not all session-only cookies, and clearing them may sign you out or remove an unsent brief.

• Sign-in cookies: our authentication service uses cookies to maintain and refresh your session and complete secure sign-in flows. They can persist for up to 400 days when set and may be refreshed or cleared during authentication. Your browser may limit their lifetime.
• Saved brief: browser storage holds a brief and your selected experience so you can continue after signing in. A draft is usable for up to 24 hours. An expired draft is removed when the app next reads it, not by a background deletion timer. You can also use Clear brief or clear your browser's site data.
• Appearance preference: browser storage remembers your selected theme until you change it or clear the stored site data.
• Provider services: sign-in, payment and security services may use their own cookies or similar technologies when you interact with them. Their collection can include technical information for security and operation of those services.

07Browser and tracking choices

You can manage cookies and stored site data through your browser. Blocking necessary cookies can prevent account access, and blocking local storage can prevent us from remembering a draft or theme. The sign-in, draft and appearance functions described above are not used by PipScene to deliver targeted advertising.

PipScene does not currently change those functions in response to a browser Do Not Track signal.

[Before publication: verify and describe any deployed analytics, advertising, collection across other websites, sale or sharing of personal information, and the applicable opt-out or consent choices.]

08Retention and deletion

We keep information for the purposes described in this notice, including providing the service, keeping requested project history, resolving billing issues, preventing abuse and meeting legal obligations. The appropriate period depends on the type of information, whether your account or request remains active, and any applicable legal or dispute-related need.

Archiving a project is not the same as deleting it. Downloading a website ZIP does not delete the project or provide a complete export of your personal information.

A deletion request may not require removal of every transaction, security or legal record. Where a lawful exception applies, we retain only information needed for that purpose. Backup and provider copies may remain for their applicable retention periods. We will explain material limits relevant to a request rather than promise immediate deletion of every copy.

09Protecting information

We use measures such as account and workspace access controls, private file storage and isolated environments for generated website code to protect information. No internet service or storage system can guarantee complete security. Protect your sign-in credentials and contact us promptly if you believe your account or information has been compromised.

10Your requests and choices

Contact [Privacy email] to ask about access, correction, deletion or a copy of your personal information, or to raise a privacy concern. Tell us the account or project involved and what you need; do not send a password or unnecessary identity documents.

Depending on applicable law, you may have additional rights, including rights to object, restrict processing, appeal a decision or complain to a regulator. We may need proportionate verification before disclosing or changing account information. We will respond under the law that applies to your request and explain any applicable exception. Exercising a protected privacy right will not result in unlawful discrimination.

Canceling a subscription renewal and asking us to delete account data are different requests. If you need both, make that clear so each can be handled.

Read the billing and cancellation terms

11Children and sensitive information

PipScene is intended for people aged 18 and over using it for business or professional projects. It is not intended for children. If you believe a child has provided information, contact [Privacy email] so the issue can be assessed and handled appropriately.

Do not upload passwords, full payment-card details, government identification documents, patient records or other sensitive information that is unnecessary for designing your website. Obtain permission before including another person's personal information, image or voice.

12Changes and contact

We will update this notice when our practices change and identify the effective date above. We will provide notice of material changes, and obtain consent where required by law.

For privacy questions or complaints, contact [Privacy email] or write to [Business mailing address]. For other service questions, contact [Support email].

Terms of service