Data & privacy
What we store, how long, and how to delete it.
Last updated: 2026-05-05
What we store
To deliver the product, Pranas stores:
| Category | Examples |
|---|---|
| Account data | Name, email, password hash (or Google OAuth id), avatar |
| Brand data you provide | Brand name, URL, positioning, competitors, prompts |
| Generated data | AI Scan results, perception scores, audit reports, recommendations |
| Usage & billing | Plan, credits used, invoices, IP/device for security |
| Telemetry | Anonymous product analytics to improve UX |
We do not sell personal data and we do not train AI models on your private brand data.
Where it lives
- All data is stored in a managed, encrypted-at-rest database with row-level security (RLS) — meaning your queries only ever see your own rows, enforced at the database layer.
- Backups are encrypted and retained for a limited window for disaster recovery.
- AI requests are sent to providers (OpenAI, Google, Anthropic, etc.) via OpenRouter under their respective data-handling agreements.
How long we keep it
- Active accounts: indefinitely, so historical trends remain available.
- Cancelled accounts: data is retained for 90 days in case you reactivate, then permanently deleted.
- Audit & scan history: kept for the lifetime of the account.
Your rights (GDPR / CCPA)
You can:
- Export your data (Account → Data → Export)
- Delete your account and all associated data (Account → Data → Delete account)
- Object to / restrict processing for specific purposes — email privacy@pranas.co
- Receive a copy of any data we hold on you within 30 days of request
Sub-processors
We use a small set of trusted vendors (database hosting, email delivery, AI providers, payments). The current list is in our Privacy Policy and is updated whenever it changes.
Reporting a security issue
Email security@pranas.co with details. We acknowledge within 48 hours and investigate every report.