StonedGPT

Privacy Policy

Last updated: August 9, 2026

Introduction

StonedGPT is operated by Hypertheory LLC ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and AI chat service (the "Service"). Please read it carefully. If you do not agree with this policy, please do not use the Service.

Information We Collect

  • Account Information: Your email address and password (securely hashed), or your Google account identity if you sign in with Google
  • Conversation Data: The prompts you submit, images you upload, and the AI responses generated for you, stored in your account so you can return to your chats
  • Payment Information: Subscription status and billing identifiers. Payment card details are collected and processed directly by Stripe; we never see or store your card information
  • Usage Metrics: Daily usage counts used for rate limiting, and event records such as account activity and support requests
  • Communications: Messages you send through our contact form
  • Analytics: First-party pageview analytics limited to the page visited, referral source, approximate country, and a short-lived pseudonymous identifier derived by hashing connection data. Raw IP addresses are not stored, and we use no third-party analytics or advertising trackers

How We Use Your Information

  • To provide the Service, including processing your prompts and generating AI responses
  • To enforce rate limits and usage quotas
  • To process subscription payments and manage billing
  • To respond to support requests
  • To monitor the Service, detect abuse, and address technical issues
  • To comply with legal obligations and enforce our terms

We do not use your conversations to train AI models, and we do not sell, rent, or share your personal data with third parties for marketing purposes.

AI Processing and Web Search

Responses in the Service are generated by artificial intelligence, not a human. To generate responses, your conversation content, including any images you upload, is sent to Anthropic, our AI provider. When a response calls for current information, the assistant may run web searches through Anthropic's search tool; search queries derived from your conversation are processed by search services and the websites they surface. Search activity is indicated in the interface while it happens.

Shared Chats

If you choose to share a chat, anyone with the share link can view that conversation without signing in. You can stop sharing a chat at any time, after which the link no longer works. Do not share chats containing information you want to keep private.

Cookies and Tracking

We use only essential cookies, set for authentication and session management; they are required for the Service to function. We store a small number of interface preferences in your browser's local storage. We do not set analytics, advertising, or targeting cookies, and our pageview analytics described above are cookieless.

Data Storage and Security

  • Secure authentication through Supabase
  • Encryption of data in transit using SSL/TLS protocols
  • Access controls limiting who can reach stored data
  • Payment processing handled entirely by Stripe

Data Retention

  • Account Information: Retained while your account is active
  • Conversation Data: Retained so you can return to your chats, until you delete a chat or ask us to delete your account
  • Usage and event data: Retained for service operations such as rate limiting, analytics, and abuse prevention
  • Payment Data: Retained as required by financial regulations and our payment processor

If you ask us to delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

Your Rights

Regardless of where you live, we honor verified requests to:

  • Access the information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your account and associated data
  • Receive a copy of your information in a portable format

You can delete individual chats yourself at any time from within the Service. To exercise any other right, contact us here. We may need to verify your identity before acting on a request.

Third-Party Services

  • Anthropic: AI text generation and web search
  • Stripe: Payment processing and subscription management
  • Supabase: Database and authentication
  • Vercel: Hosting

These providers process data only to perform their function for us. We do not share your conversation data with marketing companies or data brokers.

International Data Transfers

We are based in the United States and process data there. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction.

Children's Privacy

The Service is not directed to anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date at the top. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us here.