Privacy policy
Engineering draft — not legal advice; requires review by qualified counsel before publication.
Derived from data map. If this policy and the schema disagree, the schema wins until counsel updates both.
Who we are
Anvyll is a Windows desktop application that refines prompts for large language models. The operator of the service is the Anvyll publisher (contact via https://anvyll.app/support).
What we process
- On your device: prompts, history, sessions, projects, and related product data in an encrypted local vault. Device preferences (hotkey, theme) in a separate local file.
- On our servers (Supabase): account profile (email, display name), subscription status, credit ledger, usage meters (token counts — not prompt text), and limited anti-abuse fingerprints.
- Payment (Stripe): billing identity, payment methods, invoices, and tax data. Stripe is merchant of record.
- AI provider (OpenAI): prompt and context text in transit for refinement, via our hosted proxy (Railway).
- Sign-in (Google and/or email): identity claims needed to create and secure your account.
Why we process it
To provide the service you request (contract), to meter free credits and subscriptions, to prevent abuse of free and trial offers, to meet tax/invoicing duties, to operate and diagnose our own infrastructure (server-side error reporting with pseudonymous references — not gated by the in-app telemetry checkbox), and — only if you opt in — to collect basic client reliability signals via the telemetry setting.
Retention
See the data map. Highlights: usage events 13 months then aggregated; Stripe webhook payloads 30 days; abuse fingerprints up to 12 months after account deletion; Stripe invoices for the statutory period (accountant-owned).
Your rights (EEA/UK)
Access, rectification, erasure, restriction, portability, and objection where applicable. In the app: Settings → Privacy & data for export and deletion. Deletion cancels Stripe subscriptions immediately; invoices remain with Stripe as legally required. Contact support for other requests.
Sharing
Subprocessors are listed in subprocessor list (Supabase, Railway, OpenAI, Stripe, Google, Sentry). We do not sell personal data.
International transfers
See EU residency notes. Prefer EU hosting; where processors are outside the EEA, transfers rely on appropriate safeguards (e.g. SCCs) once counsel confirms.