Privacy Policy

Last updated: October 1, 2026

SharkScribe ("we", "us", or "our") operates the SharkScribe AI service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and other authentication information necessary to provide the Service. Authentication is managed through Better Auth.

1.2 Product Images and Content

When you use our Service to generate product descriptions, you upload product images to our servers. These images are:

• Stored temporarily on DigitalOcean Spaces (S3-compatible object storage)
• Processed by OpenAI's GPT-4 API to generate product descriptions
• Retained according to your account settings and our retention policies

1.3 Generated Content

Product descriptions, titles, and other content generated by the Service are stored in our database (hosted on DigitalOcean managed PostgreSQL) and associated with your account.

1.4 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card details. Stripe collects and processes payment information according to their privacy policy. For iOS app purchases (when available), Apple processes payments according to Apple's privacy policy, and we receive only subscription status information.

1.5 Usage Data

We collect information about how you use the Service, including:

• Generation history and usage metrics
• Feature usage and interaction patterns
• Device information and browser type
• IP address and general location data

1.6 Analytics

We use Google Analytics to understand how users interact with our Service. Google Analytics collects information such as page views, session duration, and user interactions.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate AI-powered product descriptions from your images
• Process your payments and manage subscriptions
• Send you service-related communications
• Respond to your requests and provide customer support
• Analyze usage patterns and improve our features
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations

3. Data Sharing and Disclosure

3.1 Service Providers

We share your information with third-party service providers that help us operate the Service:

• OpenAI - Processes your product images and text to generate descriptions using GPT-4 models
• DigitalOcean - Hosts our database and stores your images on DigitalOcean Spaces
• Stripe - Processes payments for web subscriptions
• Apple - Processes payments for iOS app subscriptions (when available)
• Google Analytics - Analyzes usage patterns and service performance
• Vercel - Hosts and serves the web application

3.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

If SharkScribe is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:

• Account information is retained while your account is active
• Generated descriptions are retained according to your account settings
• Uploaded images may be stored until you delete them or close your account
• Payment records are retained as required by tax and accounting regulations

You may request deletion of your data by contacting us at [email protected].

5. Your Rights (GDPR and International Users)

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you have certain rights regarding your personal information:

• Access - Request a copy of your personal data
• Rectification - Request correction of inaccurate data
• Erasure - Request deletion of your data ("right to be forgotten")
• Restriction - Request limitation of data processing
• Portability - Request transfer of your data to another service
• Objection - Object to processing of your data
• Withdraw Consent - Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected].

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encrypted connections (HTTPS/TLS) for data transmission
• Encrypted storage for sensitive data
• Access controls and authentication requirements
• Regular security assessments and updates

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. International Data Transfers

SharkScribe is operated from Poland. Your information may be transferred to and processed in countries other than your own, including the United States (OpenAI, Google Analytics) and other jurisdictions where our service providers operate. By using the Service, you consent to such transfers.

8. Children's Privacy

The Service is not intended for children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze usage through Google Analytics

You can control cookies through your browser settings, but disabling cookies may affect Service functionality.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• Email: [email protected]
• Operator: Robert Lyson / SharkScribe (Individual)
• Location: Poland