Privacy Policy

Effective Date: March 10, 2026

1. Introduction

Anomaly Index ("the Service") is operated by Brady Yaddof (Sole Proprietor). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

2.1 Information You Provide

Data	When Collected	Purpose
Google account email & name	Sign-in via Google OAuth	Account creation, identification
Support messages	Contact form submission	Customer support
Entity descriptions & parameters	Using the analysis tool	Generating AI analyses

2.2 Information Collected Automatically

Data	Purpose
Purchase records (order IDs, amounts)	Transaction history, fraud prevention
Scan balance	Service functionality

2.3 Information We Do NOT Collect

• We do not use cookies for tracking or advertising.
• We do not collect location data, device identifiers, or browsing history.
• We do not sell, rent, or trade your personal information to third parties.
• We do not store your Google password — authentication is handled entirely by Google and Supabase.

3. How We Use Your Information

• Account management: To create and maintain your user profile and Scan balance.
• Service delivery: To process your entity analysis requests via AI.
• Purchase processing: To credit Scans to your account after a Gumroad purchase.
• Customer support: To respond to your support tickets and inquiries.
• Service improvement: To understand usage patterns and improve the Service.

4. Third-Party Services

The Service relies on the following third-party providers:

Provider	Purpose	Their Privacy Policy
Supabase	Authentication, database	supabase.com/privacy
Google	OAuth sign-in	policies.google.com/privacy
Gumroad	Payment processing	gumroad.com/privacy
Google Gemini API	AI analysis generation	policies.google.com/privacy
Cloudflare	Hosting, CDN, API proxy	cloudflare.com/privacypolicy

We encourage you to review these providers' privacy policies. We do not control how they handle data once it reaches their systems.

5. Data Storage and Security

Your data is stored on Supabase's cloud infrastructure with Row Level Security (RLS) enabled, ensuring that users can only access their own data. All data is transmitted over encrypted HTTPS connections. While we take reasonable measures to protect your data, no system is 100% secure.

6. Data Retention

• Account data: Retained as long as your account is active.
• Purchase records: Retained indefinitely for legal and accounting purposes.
• Support tickets: Retained for up to 2 years after resolution.
• AI input/output: Entity descriptions you submit are sent to the AI API for processing but are not permanently stored by our Service beyond the session.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a portable format.

To exercise any of these rights, email support@yaddof.dev with the subject line "Privacy Request."

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions or requests:

• Email: support@yaddof.dev
• General: hello@yaddof.dev
• Business Name: Brady Yaddof (Sole Proprietor)
• Location: Iowa, United States