DRAFT – pending owner review. Not final legal wording.

Privacy Policy

This policy covers aiipworld.com, including the web tools, the account dashboard and the API at api.aiipworld.com. The service is operated by SKYSEED TECH LLC, a United States limited liability company. Questions about privacy: jun@aiipworld.com.

What we collect

• Account data. Your email address, an optional name, and a password. We store the password only as a scrypt hash, never in readable form. Accounts need a verified email address before you can sign in, so we send you verification and password-reset emails through Cloudflare Email Service.
• API keys. We store only a SHA-256 hash of each API key and a short prefix so you can recognise it. The full key is shown once, when you create it.
• Jobs. For each conversion we keep a job record: a job ID, the operation (for example HTML to PDF), status, timestamps, size and page counts, the credits charged and any error message. Web-tool jobs made without an account are linked to a random token that we store only as a hash.
• Files. The HTML or URL you submit, and the PDF or image produced from it. The submitted content and temporary working files are processed in a temporary folder that is deleted when the job ends. Finished files are kept as described under retention below.
• Usage and billing. A credit ledger that records each credit added or used, your plan and your credit balance. Payment details are handled by Lemon Squeezy (see below), not by us.
• Technical data. Your IP address, which we use to apply per-minute rate limits and daily quotas and to prevent abuse. On the web tool, Cloudflare Turnstile checks that a visitor is a person; Turnstile receives the information needed to do that check.
• Messages. The email address and content of any message you send us.

How long we keep it

• Web tool results (no account): deleted after 10 minutes. The download link also expires after the same period.
• Free API results: deleted after 1 day.
• Starter and Pro plan results: deleted after 7 days.
• Business plan results: deleted after 30 days.
• Submitted HTML and temporary working files: deleted when the job ends.
• Job records: kept while your account exists and deleted when you delete your account. The job record stays after the result file has been deleted.
• Credit ledger and billing records: kept after you delete your account because refunds and tax records need them, but they are no longer linked to you: after deletion they contain no email address or name. We keep billing records for as long as tax and accounting rules require; we do not set a fixed number of years.
• IP-based rate-limit counters: expire automatically, within about 26 hours.
• Server and container logs: rotate by size. Each container keeps at most 3 log files of 10 MB each, so older entries are overwritten as new ones are written. We do not promise a number of days.
• Account data: kept until you delete your account. See "Export and delete your data" below.

Who we share it with

We do not sell personal information. We use these service providers to run the service:

• Cloudflare hosts the website and its content delivery network, runs the Turnstile human check, and stores generated files in its R2 storage service. Files are served through short-lived signed download links.
• Lemon Squeezy is the merchant of record for paid plans and credit packs. It takes payment, collects and remits applicable sales taxes and VAT, and sends us order and subscription events. Its buyer terms and privacy policy govern the payment transaction and how it handles your payment data. We never see or store your full card number. Lemon Squeezy keeps its own customer records (including your email address), which we cannot delete from our side. Deleting your account here does not delete them; write to us and we will ask Lemon Squeezy to delete them.
• Hosting for the API, job queue and workers: servers we operate in a United States data centre.
• Email delivery: Cloudflare Email Service sends our verification and password-reset emails.

We may also disclose information if the law requires it, or to investigate and stop abuse of the service.

Cookies

When you sign in, we set one session cookie. It is marked HttpOnly, Secure and SameSite=Lax, it keeps you signed in for up to seven days, and we use it only to keep you signed in. This is the only cookie we set. We do not use analytics or advertising cookies. Cloudflare, which protects and delivers the site, may set its own technical and security cookies (for example __cf_bm or cf_clearance), and Cloudflare Turnstile uses similar technology for bot protection. These are used for security, not for advertising.

Security

The site is served over HTTPS. Passwords and API keys are stored only as hashes. Each conversion runs in an isolated container with a time limit. Download links expire.

Export and delete your data

You can do both yourself in the dashboard.

• Export. "Export my data" downloads a JSON file with your profile, API key list (names and prefixes, never the keys), job records, credit ledger, billing identifiers and sign-in history.
• Delete. "Delete account" asks for your password. If you have an active paid subscription, you must cancel it first (the dashboard links to the billing portal; your plan stays usable until the paid period ends). Deletion is refused while a job is still running; try again in a minute. On deletion we remove your API keys, sessions, sign-in credentials, job records and stored result files, and we erase your email address and name from our account record. Remaining credits are lost.
• What we keep. The credit ledger and billing records are kept for refunds and tax purposes. After deletion they are attached only to an anonymous placeholder, with no email address or name, so they are no longer linked to you.
• Lemon Squeezy. It holds its own customer record. Email jun@aiipworld.com from your account address and we will request deletion there.

Your rights

You can also ask us to tell you what personal information we hold about you or to correct it. Send the request from the email address on your account to jun@aiipworld.com. We answer these requests within 30 days. Some records, such as billing records, may need to be kept for longer where the law requires it. We do not claim to meet every requirement of the GDPR, the CCPA or other regional privacy laws, but we will handle your request in good faith.

Changes to this policy

We will update this page if what the service does changes, and we will change the date at the bottom. For material changes we will give you at least 30 days' notice by email. Minor changes take effect when posted. If you keep using the service after a change takes effect, you accept the updated policy.

Last updated: 2026-10-09 (draft).