Privacy Policy

Draft — last updated 2026-10-29. Not yet reviewed; operator details pending.

What we collect

• Account: your email, name and password hash.
• Projects: the images and text you upload and the materials we generate from them.
• Usage: which AI tasks you run, how much Fuel they used, and token counts, so we can bill fairly and watch costs.
• Payments: handled by our merchant of record (Paddle or Lemon Squeezy). We receive the product, amount and an event id, never your card details.
• Security: the IP address of login and password-reset attempts, kept for up to a day to block abuse.

Who processes your data

• Hosting, database and file storage: our cloud provider (Supabase or the server we run on).
• AI: when you run an AI task, the relevant project text (and the image, for image checks) is sent to DeepSeek (servers in China) or Groq (servers in the United States). We do not use your content to train models.
• Email: Resend sends account emails such as email confirmation and password reset.
• Payments: Paddle or Lemon Squeezy, acting as merchant of record.

How long we keep it

Your account and projects are kept until you delete them. Login sessions expire after 30 days. Email links expire after 1 hour (password reset) or 3 days (email confirmation).

Cookies

We use one essential cookie to keep you logged in, one to remember your interface language, and one to remember that you've seen the cookie notice. No analytics or advertising cookies.

Your rights

• Download all your data as JSON from Account → Download my data.
• Delete your account and everything you own from Account → Delete account. Payment amounts are kept without your personal details where tax law requires.

Not affiliated with Valve

Steamup is an independent tool and is not affiliated with Valve Corporation. Steam is a trademark of Valve Corporation.