Privacy policy

Shipspec is run by [Your company or legal name], [Registered address] (“we”). Questions about this policy: [support email].

• Account details: your email address, and your name and profile photo if you sign in with Google. Used to sign you in and contact you about your account.
• Usage counts: how many plans you’ve started this month and how many times each plan was generated. Used to apply the free and Pro limits.
• Subscription details: your plan, subscription status, renewal date, and the customer and subscription IDs from our payment provider. We never see or store your card details.
• IP address: used briefly to limit how many requests one address can make per day. It is held in memory and not saved to our database.

The idea you describe, your answers and the plans and files we generate are not stored on our servers. They are sent to an AI model to write your plan and returned to you. Your current draft is saved only in your own browser, and “Start over” or clearing your browser data removes it.

If you use the Shipspec MCP from your own AI, anything it sends to our tools (for example a plan to check) is processed in memory to return a result and not stored.

We use these providers to run Shipspec. Each processes data only to provide its service to us.

• Google Firebase — sign-in and our account database.
• Anthropic and OpenRouter (and the AI model provider OpenRouter routes your request to) — writing your plan. When you turn on research, your idea is also sent to a web-research model through OpenRouter.
• Dodo Payments — payments for Pro, as the merchant of record.
• [Hosting provider] — hosting the website, which may keep standard server logs.

Some of these providers are in the United States, so your data may be processed outside your country.

We use only what’s needed for the site to work: your sign-in session (stored by Firebase in your browser), your current draft, your theme choice, and your email for a moment while you finish an email sign-in link. We don’t use analytics, advertising or tracking cookies, so there’s no cookie banner.

Account details, usage counts and subscription details are kept until you delete your account. Records that stop us applying the same payment notice twice are kept for [period]. Server logs are kept by our hosting provider for [period].

You can delete your account at any time from the Account page. This deletes your sign-in and everything we store about you. You can also ask us for a copy of your data, to correct it, or to delete it by emailing [support email]. Depending on where you live, you may have further rights, including complaining to your data protection authority.

Shipspec isn’t meant for anyone under 16, and we don’t knowingly collect their data.

If we change this policy in a way that matters, we’ll update the date above and tell signed-in users.