Privacy Policy
Last updated: February 28, 2025
1. Introduction
AIslands ("we", "our", "us") is a collaborative platform where users create AI-powered projects. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.
By using AIslands, you agree to the collection and use of information in accordance with this policy.
2. Data We Collect
2.1 Account Information
When you create an account, we collect:
- Email address — used for authentication and account recovery.
- Username — a public display name you choose during signup.
- Password — stored as a secure hash by our authentication provider (Supabase). We never store or have access to your plaintext password.
2.2 User-Generated Content
When you use the platform, we store:
- Projects (Islands) — titles, descriptions, tasks, and notes you create.
- AI Profiles — names, descriptions, system prompts, and model preferences for AI agents you configure.
- Chat Sessions — conversations between you and your AI agents within projects.
- Profile bio — optional bio text you add to your profile.
2.3 API Keys
To use AI features, you provide your own third-party API keys (OpenAI, Anthropic, DeepSeek, or Google Gemini). You choose how these are stored:
- Browser-only (local) — stored in your browser's localStorage. Never sent to our servers. Lost if you clear browser data.
- Cloud (encrypted) — encrypted with AES-256-CTR before storage in our database. Only decrypted server-side when making an API call on your behalf.
We never share, sell, or use your API keys for any purpose other than making AI requests that you explicitly initiate.
2.4 Analytics Data
We use Google Analytics to collect anonymized usage data, including:
- Pages visited and time spent
- Browser type and device category
- General geographic region (country/city level)
- Referral source
Google Analytics uses cookies. You may disable cookies in your browser settings. We do not use analytics data to identify individual users.
2.5 Cookies
We use the following cookies:
- Authentication cookies — managed by Supabase to keep you signed in.
- Analytics cookies — placed by Google Analytics for usage tracking.
- Language preference — stored in localStorage to remember your chosen language (EN/RU/DE).
We do not use advertising cookies or tracking pixels.
3. Data We Do NOT Collect
AIslands does not collect or store:
- Payment or billing information (the platform is free)
- Government-issued IDs or social security numbers
- Phone numbers
- Biometric data
- Precise geolocation data
- Contact lists or address books
- Content from your third-party AI provider accounts
4. How We Use Your Data
- Account management — to authenticate you and provide access to your projects.
- Service delivery — to store and display your projects, AI profiles, and chat history.
- AI functionality — to forward your messages and API key to your chosen AI provider when you initiate a chat.
- Public feed — to display projects you mark as public on the community feed (username and project title only).
- Improvement — anonymized analytics to understand how the platform is used and improve the experience.
5. Third-Party Services
AIslands integrates with:
- Supabase — database hosting, authentication, and row-level security. Supabase Privacy Policy
- Vercel — application hosting and deployment. Vercel Privacy Policy
- Google Analytics — anonymized usage analytics. Google Privacy Policy
- AI Providers (OpenAI, Anthropic, DeepSeek, Google) — used only when you send a chat message. Your messages and API key are sent directly to the provider you selected. Each provider has its own privacy policy.
We do not sell data to any third party.
6. Data Storage & Security
- All data is stored in Supabase with Row Level Security (RLS) enabled, ensuring users can only access their own data.
- API keys stored in the cloud are encrypted using AES-256-CTR encryption.
- All communications use HTTPS/TLS encryption in transit.
- Passwords are hashed by Supabase Auth and never stored in plaintext.
7. Your Rights
You have the right to:
- Access — view all data associated with your account through the platform.
- Edit — modify your profile, projects, AI profiles, and chat sessions at any time.
- Delete — delete individual projects, AI profiles, chat sessions, or API keys. Deleting your account removes all associated data.
- Export — export your AI profile configurations as JSON files.
- Withdraw consent — you may stop using the service at any time.
To request full account deletion or a copy of all your data, contact us at sundrikvlad@gmail.com.
8. Children's Privacy
AIslands is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.
10. Contact
If you have questions about this Privacy Policy or your data, contact us at: sundrikvlad@gmail.com