Legal

Privacy Policy

Last updated: June 2026

This Privacy Policy explains what information Storm AI (operated by Storm X Studios) collects, how we use it, and the choices you have.

1. What we collect

• Account info: your email address and a hashed password (or your Google account identifier if you sign in with Google).
• What you build: the prompts you send and the code Storm AI generates for you, stored so you can revisit your projects later.
• Usage data: which AI model you used per generation, credit balances, and basic timestamps.
• Payment data: if you subscribe or buy credits, Razorpay processes your payment. We receive confirmation that a payment succeeded and store the order/payment ID — we never see or store your card number or UPI details.

2. How we use it

• To run the core product: turning your prompts into generated code via Anthropic's Claude API, and showing you a live preview.
• To manage your account, credits, and subscription.
• To improve Storm AI's reliability and detect abuse of the service.

3. Who we share data with

We share the minimum necessary data with the following service providers, solely to operate Storm AI:

• Anthropic — receives your prompts to generate code via their Claude API.
• Supabase — hosts our database and authentication; stores your account, projects, and generation history.
• Razorpay — processes payments; receives only what's needed to complete a transaction.
• Google — if you choose Google sign-in, we receive your basic profile (name, email) to create your account.

We do not sell your data to advertisers or third parties.

4. Data retention

We keep your account and project data for as long as your account is active. If you delete a project, its associated generations are permanently removed. If you'd like your account fully deleted, contact us and we'll remove your data within a reasonable timeframe.

5. Security

Passwords are hashed, not stored in plain text. Sensitive credentials (API keys, payment secrets) are stored server-side only and never exposed in the app you use in your browser. Database access is restricted using row-level security so you can only see your own data.

6. Your choices

• You can edit or delete individual projects at any time from your Dashboard.
• You can request a copy of your data or full account deletion by contacting us.
• You can sign out at any time, which ends your active session.

7. Children's privacy

Storm AI is not directed at children under 13, and we don't knowingly collect data from them.

8. Changes to this policy

We may update this Privacy Policy as Storm AI evolves. We'll update the date at the top of this page when we do.

9. Contact

Questions about your data? Reach us at stormxstudios01@gmail.com.