← AI Website Powerhouse

Privacy Policy

Last updated: July 10, 2026

AI Website Powerhouse ("AIWP", "we") is a website generation tool. This policy describes exactly what we store, why, and who touches it. Short version: we store what the product needs to function, we don't run ads, and we don't sell data.

What we store

  • Account: your email address and a password hash (handled by Supabase Auth — we never see your plaintext password).
  • Your work: the prompts you write, the websites the AI generates for you, and your chat history, so your projects persist across devices.
  • API keys you choose to save: encrypted at rest with AES-256-GCM before they reach the database. Decrypted only server-side, only to make the API call you requested.
  • Billing: your subscription status and Stripe identifiers. Card numbers never touch our servers — payment details go directly to Stripe.
  • Abuse prevention: IP addresses are used transiently for rate limiting and are not joined to your account history.

Where your prompts go

Generating a website sends your prompt to an AI model. Which one is your choice: with local Ollama, nothing leaves your machine — we never see the prompt or the output until you save the project. With your own OpenRouter key, your browser talks to OpenRouter directly under their privacy terms. With our hosted option, the request passes through our server to OpenRouter using our key.

Service providers

  • Supabase — authentication and database hosting.
  • Stripe — payments, subscriptions, invoices.
  • OpenRouter — AI inference for cloud generations.
  • Upstash — rate-limit counters (no personal content).
  • Cloudflare Turnstile — bot detection at sign-up, when enabled on a deployment.

Cookies

We set strictly-necessary cookies only: the session tokens that keep you signed in. No advertising cookies, no cross-site tracking, no analytics cookies — which is why there is no cookie consent banner. If we ever add opt-in analytics, we will ask first.

Retention and deletion

Everything is kept until you delete it. Deleting your account (from the Account page, typed confirmation required) permanently removes your profile, projects, generations, chat history, and stored keys via cascading database deletion. Stripe retains invoice records as required by financial regulations.

Contact

Privacy questions: cja86104@gmail.com.