Privacy Policy

This policy explains what Hereling collects, why, and how long we keep it. We designed Hereling to see as little as possible.

1. Data about you (the account holder)

• GitHub account id, username, and email address, used to sign you in and to send account and alert emails.
• Billing status from Paddle (plan, subscription state). Card details are handled by Paddle and never reach us.
• Waitlist email addresses, used only to tell you when Hereling opens.

2. Data about your application's usage

For each AI request that passes through our proxy or that you report to us, we store:

• your project id, the user id you send us, and the feature name you send us;
• model name, input and output token counts, cost in USD, duration, and HTTP status;
• a timestamp.

We do not store the request body (prompts, messages, system instructions) or the response body (generated text). We do not store your AI provider API key; it is forwarded in memory and discarded.

3. Data from your payment providers

From Stripe, Paddle, or RevenueCat webhooks we store: the user id you attached to the event, plan name, amount, currency, event type (purchase, renewal, cancellation), and timestamp. We do not receive or store your customers' card details, names, or addresses.

4. Your customers' identifiers

The user id you send us is chosen by you. We recommend using an opaque id rather than an email address. Hereling treats it as a label and never contacts your users.

5. Where data lives and who processes it

• Hosting and proxy: Vercel.
• Database and authentication: Supabase.
• Email: Resend.
• Payments: Paddle.

These providers process data on our behalf under their own data processing terms.

6. Retention

Free plan usage data is kept for 7 days. Pro plan usage data is kept while your subscription is active and for 30 days after it ends. Account data is deleted within 30 days of account deletion. Waitlist emails are deleted when the waitlist closes or on request.

7. Your rights

You can export or delete your project data from the dashboard, or ask us at support@hereling.com. If you are in the EU or UK you have the rights described in the GDPR, including access, correction, deletion, and portability.

8. Cookies

We use only the cookies needed to keep you signed in. No advertising or cross-site tracking cookies.

9. Changes

If we change this policy in a meaningful way we will email account holders before the change takes effect.