Privacy
Working text pending counsel review, not yet a binding policy. It lists what this site stores, read off the code that stores it. The engine, CLI and MCP server run on your own machines and send nothing here unless you use palletizer cloud.
| What | Where | Why | Kept |
|---|---|---|---|
| Your email, your plan and its end date, your Stripe customer id | Supabase: profiles | Signing in; deciding what your plan unlocks | While the account exists |
| Subscription status and billing period | Supabase: subscriptions (card details stay with Stripe) | Billing | While the account exists |
| Pilot requests: name, email, company, message, and the plan hash and summary you attach | Supabase: leads; forwarded to the operator's workflow tool if one is configured | Answering the request | Until you ask for deletion |
| Plans you save (paid plans) | Supabase: plan_history | Your history | Newest N for your plan; older ones are deleted automatically |
| API keys | Supabase: api_keys — only a SHA-256 of the key, never the key | Authenticating API calls | Until revoked or the account is deleted |
| Daily usage counts (API requests, model answers, attestations) | Supabase: usage_counters | Enforcing your plan's daily limits | One row per account and day; not yet deleted automatically |
| Which feature was wanted and which plan wanted it — a daily tally, e.g. "refused.exports, free, 14" | Supabase: demand_signals | Learning which paid feature people actually reach for, so it gets built or priced right | One row per day, feature and plan tier. It carries no account id, no key id and no request content, so it cannot be traced back to you |
| Assistant and co-pilot messages | Sent to Anthropic's API only when a model answers: signed in, within your plan's daily number. Never for a visitor without an account | Writing the answer | Not stored by this site |
| Plans and SKU files on /demo and /plan | Processed in your browser; the last plan's summary sits in this tab's session storage | Checking and building plans | Until the tab closes |
| SKU data sent to /api/optimize or /api/v1 | Processed on the server to compute the plan | Planning | Not stored, unless you save the plan to history |
Nothing is sold. Payments are processed by Stripe; this site never sees a card number.
Signed attestations identify an account only by an opaque reference derived from its id, not by email.
To see or delete what is stored about you, ask through the contact page without posting personal details in public; you will be asked to confirm from the account's email.