Privacy Policy

Last updated: July 14, 2026

This is a working draft written to accurately describe how the product currently handles data. It has not yet been reviewed by legal counsel and should not be treated as final or binding before the product launches to paying customers.

1. Introduction

This Privacy Policy explains what information ShopAltAI (“we,” “us”) collects when you use our website and service, why we collect it, and how it's handled. ShopAltAI is operated by AS Web Technologies as a standalone product, separate from any other product we operate.

2. Information We Collect

Account information: your email address and password (handled by our authentication provider, Supabase), and your subscription tier.

Site scan data: when you scan a URL — with or without an account — we store the URL, the number of images found, and how many are missing alt text.

Generation data: the images or image URLs you submit for alt-text generation, the generated alt text, which AI engine produced it, and whether it succeeded.

BYOK API keys: if you connect your own AI provider key, it is encrypted before storage (AES-256) and is only ever decrypted in server-side code to make a request on your behalf — never sent to or displayed in your browser after you save it.

Usage data: your credit balance and generation history, so we can show you your own account activity.

3. How We Use Information

  • To provide the core service — running scans, generating alt text, and tracking credit usage.
  • To maintain your account and authenticate you.
  • To respond to support requests submitted through our Contact Us form.
  • To improve the service, including understanding which AI engines perform reliably.

We do not sell your personal information to third parties.

4. Third-Party Service Providers

We rely on a small number of third-party services to operate:

  • Supabase — our database, authentication, and hosting infrastructure provider. Account information, scan data, and generation history are stored in Supabase-hosted infrastructure.
  • Google Gemini API — images and image URLs you submit for generation are sent to Google's Gemini API for AI processing. Google processes this data under its own API terms.
  • Your own AI provider (BYOK only) — if you bring your own API key, your submitted images are sent directly using your key to your chosen provider (currently Gemini), subject to that provider's own terms.

5. Cookies

We use a session cookie to keep you signed in — this is required for the service to function and isn't used for advertising or tracking. We do not currently use analytics or advertising cookies.

6. Data Retention

We retain account and generation data for as long as your account is active. Anonymous scan data (from the free, no-signup scan) is retained to improve the service and is not linked to an identifiable person unless you later sign up and it becomes associated with your account.

7. Your Rights

You can access, correct, or request deletion of your personal information at any time by contacting us. Deleting your account removes your profile, credit history, and BYOK key; some records may be retained briefly for legal or security purposes.

8. Security

BYOK API keys are encrypted at rest. Access to production data is restricted, and all data in transit is encrypted (HTTPS/TLS). No method of storage or transmission is 100% secure, and we can't guarantee absolute security.

9. Children's Privacy

ShopAltAI is not directed at children under 13, and we do not knowingly collect information from them.

10. Changes to This Policy

We may update this policy as the product evolves. We'll update the “Last updated” date above when we do.

11. Contact

Questions about this policy? Reach us through our Contact Us page.