Privacy Policy

1. The 24-Hour "Self-Destruct" Rule (Data Retention)

We value your privacy more than we value your feelings. When you upload an image to Brutal.ai, it is processed securely by our AI partner (Google Gemini). Exactly 24 hours after your roast is generated, your uploaded image and the final generated Story Card are permanently deleted from our servers. We do not build databases of your faces.

2. What Information We Collect

Images: Uploaded temporarily solely for the purpose of generating the roast.

Email Address: Collected via our payment processor to send you your receipt and your downloadable Story Card.

3. Payment Data

We do not collect, process, or store your credit card information. All payments are handled securely by our Merchant of Record, Polar.sh. Please refer to their privacy policy for details on how your financial data is handled.

4. Third-Party Services

To provide our service, we share your temporary data with specific third parties:

• Google Gemini: To analyze the image and generate text.
• Resend: To email you your final Story Card.
• Polar.sh: To process your payment securely.
• PostHog: For anonymous product analytics (page views, button clicks, conversion events). No personal data or images are shared. See their privacy policy for details.

5. Cookies & Analytics

We use basic essential cookies to keep your session active while the AI is roasting you. We do not use creepy tracking cookies to follow you across the internet.

We use PostHog for anonymous, aggregated analytics (page views, button clicks, conversion events) to understand how the product is used and improve it. PostHog is configured with cookie-less, memory-only tracking. No personally identifiable information is collected, no cookies are set for analytics, session recording is disabled, and we do not build user profiles. Analytics data is automatically deleted after 30 days.