Privacy Policy

Information We Collect

• Account data, such as email address, optional profile name, hashed password, and authentication token metadata.
• Guest and trial identifiers, such as guest identifiers and device identifiers used to issue guest access and enforce trial eligibility.
• Billing data, such as plan, Stripe customer and subscription references, and subscription history.
• Service usage data, such as successful request counts, download click counts, timestamps, and quota records used to operate plans and enforce limits.
• Content you submit for processing, including snippets and prompts sent through the API to fulfill your request.

How We Use Information

We use information to provide the product, authenticate users, process payments, enforce quotas, prevent abuse, troubleshoot issues, and communicate account or service updates.

How Request Content Is Handled

When you submit content through OneShotty, the service forwards that content to the configured AI provider so the request can be completed. OneShotty does not store prompt bodies or model response bodies in its application database.

Processors And Service Providers

We use third-party processors to operate OneShotty. For example, payment processing is handled by Stripe, AI request processing is handled by the configured OpenAI-compatible provider, and password-reset delivery may involve the SMTP provider configured for the service.

Logging And Security

Application logs are limited to operational and security events during normal operation. If debug logging is explicitly enabled, the server may log full API response bodies for troubleshooting, which can include model outputs, token responses, billing responses, or other request-related data. Outside debug mode, the server is configured not to intentionally log prompt bodies, model response bodies, passwords, bearer tokens, refresh tokens, or password-reset links.

Cookies And Tracking

The pages served by this application do not include third-party analytics or advertising cookies.

Retention

We retain account, billing, subscription, and usage records for as long as needed to provide the service, maintain security, satisfy legal obligations, and resolve disputes. Retention periods vary by data type, and prompt or response bodies are not retained in the application database.

Your Choices

You can manage account details, change or cancel paid plans, and request account deletion by contacting us. Deletion requests may be subject to legal or operational retention requirements.

Children

OneShotty is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes To This Policy

We may update this Privacy Policy from time to time. Updated versions are posted on this page with a revised "Last updated" date.