Privacy Policy

Last updated: March 2026

1. Introduction

GAAS ("we", "our", "us") operates gaasai.io, an AI-powered branding platform for e-commerce businesses. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.

2. Information We Collect

  • Account information: name and email address when you create an account.
  • Brand data: brand name, tagline, industry, style preferences, logos, color palettes, and all generated assets.
  • Payment information: processed securely through Stripe. We do not store your credit card details.
  • Usage data: pages visited, features used, generation history, and general interaction patterns.

3. How We Use Your Information

  • Provide and operate our AI branding services.
  • Generate brand assets (logos, ads, web assets, mockups) based on your inputs.
  • Process payments and manage your subscription.
  • Send transactional emails (account confirmation, password reset, subscription updates).
  • Improve and optimize our product and AI generation quality.

4. Data Storage

  • Supabase: stores your account data, brand information, and application data in a PostgreSQL database.
  • Supabase Storage: stores your generated assets (logos, images, mockups).
  • Stripe: securely processes and stores payment information.

5. Third-Party Services

We use the following third-party services to operate GAAS:

  • Supabase: authentication, database, and file storage.
  • Stripe: payment processing and subscription management.
  • Google Gemini AI: AI-powered text and image generation for brand assets.
  • Resend: transactional email delivery.
  • Vercel: application hosting and deployment.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Update or correct your account information at any time.
  • Request deletion of your account and all associated data.
  • Export your brand assets (logos, images, media packs).
  • Cancel your subscription at any time from your account settings.

To exercise any of these rights, contact us at contact@gaasai.io.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account or request data deletion, we will remove your personal information and generated assets within 30 days. Some anonymized usage data may be retained for analytics purposes.

8. Cookies

GAAS uses only essential cookies required for authentication, managed by Supabase Auth. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

9. Contact

If you have any questions about this Privacy Policy, please contact us at contact@gaasai.io.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Continued use of GAAS after changes constitutes acceptance of the updated policy.