Privacy Policy
Last updated: May 25, 2026
This Privacy Policy describes how Initly (“we”, “us”, “our”) collects, uses, and shares information when you use initly.ai (the “Service”). Initly is the data controller for personal data processed in connection with the Service.
1. Information We Collect
Account Information
When you create an account, we collect your email address, name (optional), and a hashed password (we never store plaintext passwords). If you sign in via GitHub or Google, we receive your name, email, and profile image from those providers.
Setup Guide Inputs
When you use the setup wizard, we collect the information you provide: your role, use case, tools, experience level, goals, challenges, platform, team size, and budget preference. This data is used to generate your personalized guide.
Generated Content
We store the setup guides, configuration files, and action items generated for you so you can access them from your dashboard.
Payment Information
Payments are processed by Stripe. We do not store your credit card details. We store your Stripe customer ID, subscription status, billing period, and high-level purchase records.
Usage and Technical Data
We collect limited technical data including IP address (for rate-limiting and abuse prevention), browser type, and timestamps of requests. We use Vercel Analytics, which collects aggregated, privacy-friendly page-view counts without using identifying cookies.
2. How We Use Your Information
- To generate personalized setup guides using AI;
- To manage your account, subscriptions, and marketplace transactions;
- To send transactional emails (sign-in links, receipts, account notices);
- To prevent fraud, abuse, and unauthorized access;
- To comply with legal obligations;
- To improve the Service through aggregated analytics.
We do not sell your personal information, and we do not use your data to train any third-party AI model except as required to generate output for you.
3. Subprocessors
We use the following third-party service providers (“Subprocessors”) to deliver the Service. Each is bound by their own privacy commitments; review their policies for full detail.
| Provider | Purpose | Data shared |
|---|---|---|
| Anthropic (Claude AI) | Generating setup guides and agent definitions | Wizard inputs (role, use case, tools, experience, goals, challenges, platform, team size, budget). Anthropic's commercial terms state API data is not used to train their models. |
| Stripe | Payment processing | Email, payment details, billing address |
| Resend | Transactional email delivery (sign-in links, receipts) | Email address, message content |
| Vercel | Hosting, edge networking, and anonymous analytics | IP address, request metadata, anonymous page views |
| Turso (libSQL) | Primary database storage | All account data, generated content, marketplace listings, purchase records |
Provider privacy policies: Anthropic, Stripe, Resend, Vercel, Turso.
4. Marketplace Information
If you list a setup on the marketplace, the following information becomes publicly visible: your display name, the setup title, description, category, tags, and non-premium configuration files. Your email address is never shared publicly. You are responsible for ensuring your listed content does not contain proprietary or confidential information.
5. Data Retention
We retain account data and generated content for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing privacy@initly.ai. We will honor verifiable deletion requests within 45 days. Some records (payment history, anti-fraud logs) may be retained longer where required by law.
6. Your Rights
You have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate data;
- Request deletion of your data;
- Export your data in a portable format;
- Object to or restrict certain processing;
- Withdraw consent where processing is based on consent.
To exercise these rights, email privacy@initly.ai from the email associated with your account.
California Residents (CCPA / CPRA)
California residents have additional rights: to know what categories of personal information we collect and disclose, to delete personal information, to correct inaccurate information, and to opt out of sale or sharing for cross-context behavioral advertising. We do not sell your personal information and do not share it for cross-context behavioral advertising. To exercise CCPA rights, email privacy@initly.ai. We do not discriminate against users who exercise their privacy rights.
EU / UK Residents (GDPR / UK GDPR)
Our legal bases for processing are: consent (account creation, marketing communications), performance of a contract (providing the Service and processing payments), legal obligation (tax and fraud-prevention records), and legitimate interest (security, abuse prevention, product improvement). You have the right to data portability and the right to lodge a complaint with your local data protection authority. International transfers to U.S.-based subprocessors rely on Standard Contractual Clauses where applicable.
7. Cookies and Tracking
We use essential cookies for authentication and session management. We do not use advertising or cross-site tracking cookies. Vercel Analytics measures aggregate page views without identifying cookies.
Do Not Track.Our Service does not respond to “Do Not Track” (DNT) browser signals, because there is no industry consensus on how to interpret them. You can still control tracking by adjusting your browser settings, blocking third-party cookies, or using privacy-focused browsers.
8. Security
We use industry-standard measures to protect your data, including bcrypt password hashing, HTTPS throughout, signed session tokens (JWT), rate limiting, prompt-injection mitigations, output sanitization, and verified webhook signatures. However, no method of transmission over the Internet or method of electronic storage is 100% secure.
9. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact privacy@initly.ai and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy at any time. For material changes, we will provide notice via email or a notice on the Service at least 14 days before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.
11. Contact
Questions about your privacy?
Privacy inquiries: privacy@initly.ai
General contact: support@initly.ai
Phone: (737) 235-7169