1. Data we collect

Account information (name, email), usage data (commands, drafts, job results, credit and order history), technical data (IP address, device type, access logs) and cookies needed for sign-in, language and theme preferences.

2. How we use it

Data is used to: provide and operate the service; calculate and reconcile credits; confirm payments; prevent fraud and abuse; support customers; and improve service quality — including using operational data (commands, scripts, approval decisions) to train and fine-tune models that serve Stafon.

3. Sharing

We do not sell personal data. Data is shared only with infrastructure and content-generation providers at the minimum level needed to perform your jobs, with payment gateways to process transactions, and with authorities when the law requires it.

4. Storage and security

Passwords are hashed with a strong one-way algorithm; sessions use HttpOnly cookies; the credit ledger is designed to be append-only. Product files you upload are kept for at most 30 days unless you ask for earlier deletion.

5. Your rights

You may access, correct and request deletion of your personal data. Send requests via the in-app support channel; we respond within a reasonable time as required by law.