This Privacy Policy applies to Costumary websites, accounts, workspaces, and related services. It covers information we collect when you browse the site, create an account, upload references, write build logs, manage materials, use the Build Assistant, contact support, or subscribe to a paid plan.

Costumary is designed for personal and creative project organization. Please do not upload other people's private information unless you have permission and it belongs in your build workspace.

We collect information you provide directly, information created as you use the product, and limited technical data needed to run the service.

We use personal information for practical product and business purposes tied to your account and workspace.

• Provide, maintain, and improve Costumary.
• Authenticate users and protect accounts from unauthorized access.
• Save projects, references, uploads, build logs, timelines, and materials.
• Operate subscriptions, billing, support, and transactional emails.
• Debug errors, analyze product performance, and prevent abuse.
• Send product updates or marketing only where allowed and with opt-out controls.
• Comply with legal obligations and enforce our terms.

We do not sell personal information. We share information only when needed to provide Costumary, process payments, comply with the law, protect rights and safety, or complete a business transfer such as a merger or acquisition.

Service providers may process information for us, including:

• Supabase for authentication, database, and file storage.
• Vercel or similar hosting providers for app hosting and delivery.
• Stripe for payment processing and subscription management.
• Resend or similar email providers for transactional messages.
• OpenRouter and model providers for Build Assistant requests.
• Analytics, monitoring, and support tools used to keep the product stable.

If you invite collaborators or later choose to publish or share a build, the information you share may be visible to the people or audience you selected.

Costumary uses necessary cookies and browser storage for authentication, session-related data, security, and basic app preferences. That is what keeps login and the workbench from falling apart between pages.

Analytics and monitoring are optional. You can accept them, keep things minimal, or reject the extras from the cookie notice. Blocking necessary cookies in your browser may break login and workspace features.

When you use the Build Assistant, your prompts and relevant project context may be sent to third-party model providers through OpenRouter or similar infrastructure so the assistant can answer with build-aware context.

Avoid entering sensitive personal information into assistant conversations. We use assistant history to keep project context, improve product reliability, prevent abuse, and debug issues.

Depending on where you live, you may have rights over your personal information. These may include the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account or request deletion of personal information.
• Export certain information in a portable format where available.
• Opt out of marketing emails.
• Object to or restrict some processing where applicable law gives you that right.
• Appeal or complain to a privacy authority if required by local law.

California residents may have additional rights to know, delete, correct, limit certain sensitive information, opt out of sale or sharing, and avoid discrimination for exercising privacy rights. Costumary does not sell personal information.

To make a request, email support@costumary.com. We may need to verify your identity before completing a request.

We use technical and organizational safeguards intended to protect personal information, including account authentication, access controls, and provider security controls. No online service can guarantee perfect security, so use a strong unique password and protect your account access.

We keep information for as long as needed to provide Costumary, comply with legal obligations, resolve disputes, prevent abuse, and maintain backups. If you delete your account, active product data is deleted or de-identified within a reasonable period, except where retention is required for legal, billing, security, or backup purposes.

Costumary is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Questions, requests, or concerns can be sent to support@costumary.com.

We may update this policy as Costumary changes. If the changes are material, we will take reasonable steps to notify you, such as updating the date above or sending an in-product or email notice.