Privacy Policy
The short version: your scripts and outputs never reach our servers, we hold no model keys of our own, and we never store or log the key you bring. We run no analytics. The little we process is your account email and the purchase record our payment provider keeps.
1. BYOK by design
Singularity Studio runs a Bring-Your-Own-Key architecture, and we hold no model keys of our own. Your keys are stored locally in your browser.
Desktop app: the orchestration engine runs on your own machine at 127.0.0.1, so your key travels from your computer straight to the provider you chose and never touches infrastructure we operate.
Browser: calls to some providers currently pass through our server, which attaches your key to that single request, forwards it and discards it. We never store it, never write it to a log or a URL, and never reuse it for anything else. We are migrating these calls to run directly from your browser; until a provider is listed as direct, treat it as passing through us.
The controller for the personal data described in this policy is the site's individual founder, reachable at support@singularityos.tech. Full controller identity details (legal name, address, tax ID) will be published on the Imprint page as soon as business registration completes.
2. What we process
Account: if you sign in, we process your email address (through our authentication provider, Supabase) to operate login and licensing.
Purchases: Whop processes your name, email and payment details to complete checkout and settle the payment. We receive the resulting membership and licence record, never your full payment details.
3. What we do not collect
We do not collect your scripts, prompts, projects or generated outputs. They persist in your own browser storage (local-first). Clearing your browser data removes them permanently.
We run no analytics, advertising pixels or behavioral tracking on the site or in the Studio.
4. Cookies and local storage
We use no non-essential cookies. Local storage holds your preferences and projects on your machine. Details are in the Cookie Policy.
5. Processors
We rely on a small set of processors: Supabase (authentication), Whop (payment processing for the Founder's Lifetime Pass) and Vercel (hosting). Each processes data under its own safeguards and our instructions; international transfers rely on standard contractual protections.
6. Retention
Account data is kept while your account is active and deleted on request. Purchase and payment records are retained by Whop, and by us as the seller, as required by tax and commercial law.
7. Your rights
You may request access to, correction of, or deletion of your personal data at any time — including rights under the GDPR and Türkiye's KVKK where they apply. Write to us and we will respond promptly.
8. Children
The Service is not directed to children under 13 and we do not knowingly collect their data.
9. Changes
We may update this policy; material changes will be announced on this page with a new effective date.