descrai

Privacy Policy

Last updated: May 2026

1. Data We Collect

When you use Descrai we collect:

  • Account data — email address, display name, and profile picture (provided by Google at sign-in)
  • Uploaded CSVs — the product data files you submit for processing
  • Generated descriptions — the AI output files associated with each job
  • Usage data — number of descriptions generated, job history, billing plan
  • Payment data — handled entirely by Stripe; we store only your Stripe Customer ID and subscription status, never raw card data

2. Why We Collect It

  • To authenticate you and operate the Service
  • To process your CSV files and return generated descriptions
  • To manage your subscription and enforce plan limits
  • To communicate with you about your account (transactional emails only)

3. Third-Party Sub-processors

We share data with the following third parties to operate the Service:

  • Google — authentication via OAuth 2.0
  • Vercel — application hosting and edge functions
  • Neon — database hosting
  • Groq — AI description generation (your product data is sent to the Groq API; it is not used to train models under current API terms)
  • Stripe — payment processing and subscription management

4. Your Rights Under GDPR

If you are in the EU / EEA you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Deletion — request that we erase your data (right to be forgotten)
  • Export / Portability — receive your data in a machine-readable format
  • Rectification — ask us to correct inaccurate personal data
  • Objection — object to processing where we rely on legitimate interest

To exercise any of these rights, email 0nivip.dev@gmail.com. We will respond within 30 days.

5. Data Retention

Active accounts: we retain all data for as long as your account exists. Deactivated accounts: account data is retained for 30 days after deactivation, then permanently deleted. Output CSV files on disk are deleted immediately when you deactivate your account. You may request immediate deletion at any time by contacting us at 0nivip.dev@gmail.com.

6. Cookies

We use only essential cookies required for authentication (a session token stored in an HTTP-only cookie). We do not use tracking, advertising, or analytics cookies.

7. Contact

Data controller: Descrai, Germany. For privacy enquiries or GDPR requests: 0nivip.dev@gmail.com