ShotStudio is built privacy-first. Your uploaded screenshots and the images we generate from them are not persisted on our servers — they live in memory only for as long as the request takes, then they are gone. This page describes what we do collect, why, and how to remove it.
What we don't store
- Uploaded screenshots are streamed to the AI model and discarded once the response is received. We never write them to disk, S3, or any database.
- Generated images are returned to your browser as temporary in-memory URLs and are unrecoverable once your tab closes. We have no generation-history feature, no thumbnail cache, and no images table.
- We do not sell, share, or use your screenshots or generated outputs to train any model.
What we do store
- Account data: your email, your Clerk user ID, your credit balance, and account creation timestamp.
- Transactions: a row per credit purchase, usage, or refund (Stripe payment ID, amount, type, timestamp).
- Generation metadata: a row per generation containing app name, style preset, category, status (pending/complete/failed), and timestamps. No images, no screenshots, no copies of the prompt inputs beyond what is listed here.
- Server logs: standard request metadata (timestamp, route, response status, anonymized error context). Logs are retained for up to 30 days.
Sub-processors
We use the following vendors to operate the service. Each receives only what it needs to do its job:
- Clerk — authentication and user identity.
- Stripe — payments, tax calculation, and customer billing portal.
- Supabase (Postgres) — primary database for the data listed above.
- Upstash Redis — webhook idempotency and rate limiting.
- OpenRouter / OpenAI — image generation. Inputs and outputs pass through these services per their respective privacy policies.
- Resend — transactional email delivery.
- Vercel — hosting and request logs.
Cookies
ShotStudio uses cookies only as needed for authenticated sessions (managed by Clerk) and Stripe Checkout. We do not use third-party analytics or advertising cookies.
Your rights
You can update your email and payment methods through the Stripe Customer Portal at any time, accessible from Settings. To delete your account and the associated data described above, email kazakis.th@gmail.com. Because we do not store screenshots or generated images, there is nothing image-related to delete.
Children
ShotStudio is not directed at children under 13 and we do not knowingly collect data from them.
Changes
We will update this page when our practices change. Material changes will be communicated by email to active accounts.
Contact
Questions about this policy: email kazakis.th@gmail.com.