Privacy Policy

Information we collect

We collect account information supplied through Google and Supabase authentication, such as your email address, display name, authentication provider, and account identifier.

We store the prompts, messages, project source, generated artifacts, deployment manifests, build events, and publishing records needed to create and operate your projects. If you contact support, we also receive the information in your message.

For published apps, we record limited aggregate analytics including page path, referring host, device category, country code supplied by our hosting provider, and timestamp. Instamake does not store visitor IP addresses, advertising identifiers, or full referring URLs for this analytics feature.

Connected services

When you connect Shopify, we store your shop identity, domain, app scopes, public Storefront token, and installation status. Shopify Admin and refresh tokens are stored in an encrypted server-side vault and are never placed in generated storefront code. Instamake’s initial Shopify integration does not request or retain Shopify customer records.

When you connect Stripe, Stripe-hosted onboarding collects and verifies your business, identity, and payout information. Instamake stores the connected-account identifier, payment-readiness fields, outstanding requirement names, and signed event records needed to operate the connection. Instamake’s platform credential and Stripe webhook secret remain server-side and are never placed in generated code.

When you purchase Instamake hosting, Stripe collects and processes your payment details. We store Stripe customer, checkout, and subscription identifiers, subscription status, your selected app address, and billing-event records needed to provide hosting. Instamake does not receive or store your full card number.

How we use information

• Provide authentication, project generation, previews, publishing, and connected-service setup.
• Secure, debug, maintain, and improve Instamake.
• Respond to support, privacy, and legal requests.
• Prevent misuse and comply with applicable law.

Service providers and disclosure

We use service providers including Supabase for authentication, databases, functions, and storage; Vercel for web hosting; Google for sign-in; and model and isolated-compute providers to generate and verify project code. We send information to Shopify or Stripe only when you choose to connect those services. These providers process information under their own terms and privacy policies.

We may disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information or use it for cross-context behavioral advertising.

Retention, security, and international processing

We keep information while your account or projects remain active and as reasonably needed to operate the service, resolve disputes, secure the platform, and meet legal obligations. Different records may have different retention periods. We use access controls, row-level database policies, encryption in transit, restricted server credentials, and isolated generated backends, but no system can guarantee absolute security.

Instamake and its providers may process information in the United States and other countries where they operate. Those countries may have different data-protection rules than your location.

Your choices and rights

You can edit your display name, delete individual projects, disconnect Shopify or Stripe from a project, uninstall the Shopify app, or request account access, correction, export, or deletion. Disconnecting Stripe stops Instamake from using that account for the project; the merchant can manage or close the Stripe account in Stripe. Shopify privacy webhooks are honored for shop and customer-data requests; because this integration does not retain Shopify customer records, customer requests return without customer records.

See our data deletion instructions or email gary@general-context.com. We may need to verify your identity before completing a request. Depending on your location, you may also have the right to object, restrict processing, or complain to a data-protection authority.

Children and changes

Instamake is not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy as the service changes. We will post the updated policy here and revise its effective date; material changes may also be communicated in the service.

Contact

Questions or privacy requests can be sent to General Context at gary@general-context.com.