Privacy policy

Your account email and profile, the briefs you submit, the documents and images we generate from them, and payment metadata from Stripe (what you bought and when — never your card number). That is the whole list. We do not buy data about you, and we do not sell or rent your data to anyone.

A brief often contains a client's confidential plans, so we treat it accordingly: briefs are processed solely to generate your treatment. They are never used to train AI models — not by us, and not by our AI providers under the terms we use them. Nobody browses your briefs; access is limited to what is needed to run and debug the service.

We use a small set of processors, each for one job:

• —Supabase — database, authentication and file storage (your account, briefs, documents and images)
• —Anthropic — text generation — writes the treatment from your brief
• —fal.ai — image generation — creates the moodboard images
• —Stripe — payments and subscriptions; we never see your card number
• —Resend — transactional email (login links, treatment-ready notifications)
• —Vercel — hosting the website and app
• —Plausible — cookieless, privacy-friendly analytics

Analytics deserve a special mention: Plausible is cookieless. We set no tracking cookies at all, which is why this site has no cookie banner — there is nothing to consent to.

Until you delete it. Treatments and briefs stay in your account so you can come back to them; delete a treatment and it is gone, delete your account and everything goes — see below. Stripe retains payment records for as long as tax law requires; that part is not optional for anyone.

Under the GDPR you can access, correct and delete your data. Most of it you can do yourself: your treatments are downloadable, and account deletion lives in the app under settings. Deleting your account removes your login, your database rows and your stored files — briefs, documents, images, PDFs. It is not a soft delete.

For anything you cannot do self-serve — a data export, a correction, a complaint — email us. You also have the right to complain to the Dutch data protection authority (Autoriteit Persoonsgegevens), though we would appreciate the chance to fix it first.

Treatmnt is operated from the Netherlands. Privacy questions and requests: studio@treatmnt.ai.