NO BULLSHIT AI WORLDCustomer portal
Privacy

Clear handling of customer information.

This page explains the information No Bullshit AI World uses to operate the website, customer portal, project workflows, billing, support, and business communications.

Last updated October 4, 2026

Plain-language summary: we use customer information to provide and secure the service, communicate about work, operate billing and support, and maintain business records. Sensitive credentials should never be sent through project or support messages.

Information we may receive

Depending on how you use the service, information may include your name, email address, business name, project requests, support messages, project records, billing records, authentication identifiers, and technical information needed to operate and secure the service.

Payment-card details entered in Stripe Checkout are handled by Stripe. No Bullshit AI World does not need customers to send card numbers through project forms, email, or support messages.

How information is used

  • Respond to inquiries and scope requested work.
  • Authenticate customers and protect account access.
  • Operate customer projects, progress records, billing, and support.
  • Send transactional messages related to inquiries, projects, billing, security, or support.
  • Maintain audit, security, reliability, and business records.
  • Prevent abuse, investigate operational problems, and improve service quality.

Service providers

We use specialized service providers to operate the platform. Current production providers include Render for application hosting and database services, Supabase for authentication, Stripe for payment processing, Resend for transactional email, and Cloudflare for domain and DNS infrastructure. Those providers process information according to their own applicable terms and privacy practices while performing services for us.

Authentication and security

Customer sessions are handled through Supabase authentication. Founder operations require a stronger MFA-authenticated session. Server-side authorization is used before customer or founder records are returned. Customers should never send passwords, MFA codes, recovery codes, payment-card numbers, private API keys, or other secret credentials in forms or support messages.

Retention and deletion

Business, project, billing, support, security, and audit records may be retained for as long as reasonably needed to provide the service, maintain legitimate business records, protect the platform, resolve disputes, and meet applicable obligations. Retention periods can vary by record type and legal or operational requirement.

Requests concerning access, correction, or deletion can be sent to the contact address below. Some records may need to be retained where deletion is not legally or operationally appropriate.

Third-party links and services

The website or project work may connect to third-party products or websites. Their collection and use of information is governed by their own policies. We do not control independent third-party services merely because they are linked or integrated with a project.

Changes to this page

We may update this privacy information as the service, providers, or applicable requirements change. The updated date at the top of this page identifies the current published version.