Privacy Policy

This Privacy Policy applies to WHAT IF and related websites, previews, and services operated by Juno Design, Inc. ("Juno Design", "we", "us", or "our").

We may collect the following categories of information:

• account and identity information, such as your email address, profile name, avatar, auth provider, and account identifiers;
• content you submit, store, or generate in the Service, including prompts, notes, images, files, sites, version history, URLs, canvas data, and generated outputs;
• payment and transaction information, such as purchased credit packs, transaction identifiers, billing metadata, and usage ledger entries;
• device, browser, and usage information, including local storage state, feature interactions, and analytics events;
• information from connected third-party services, such as GitHub account connections and repository synchronization metadata;
• email sent to the inbound address we assign to your account, if you enable that feature, including the message body, subject, attachments, sender address, and mail headers such as the message identifiers we use to thread our replies.

Your inbound address can receive mail from anyone. We process only mail sent from your own account email address; other mail is discarded without reaching your canvas, and we retain from it only a delivery identifier used to avoid processing the same message twice.

We collect information when you:

• create an account or sign in using Supabase-supported auth;
• enter prompts, upload or paste files or images, or save notes;
• create or edit sites, previews, and deployments;
• connect GitHub or other third-party services;
• purchase credits or otherwise use paid features;
• send email to the inbound address we assign to your account, if you enable that feature;
• use the app, previews, and related pages in your browser.

We use information to:

• provide, maintain, secure, and improve the Service;
• authenticate users and manage accounts;
• store, sync, preview, publish, and otherwise process your content;
• run AI features, including sending prompts, files, images, and related context to third-party model providers;
• process payments, credits, refunds, disputes, and usage records;
• monitor usage, troubleshoot errors, and prevent abuse;
• communicate with you about the Service.

When you use AI features, we may send prompts, files, images, URLs, and other relevant context to one or more third-party AI providers in order to generate responses or provide related features. The specific providers we use may change over time as we add, remove, or substitute vendors. If you ask the Service to observe or inspect a URL, we may also fetch that URL and capture screenshots or related context for model processing.

Some WHAT IF features create public URLs, including preview URLs and named deployment URLs. Content published to those URLs may be accessible to anyone who has the URL. SHA-based commit content may also be retrievable through public endpoints if the SHA is known.

You can also make your canvas (your "space") available as a public, read-only view through a share link. If you enable sharing, the content in that space — such as notes, images, links, and other items — may be viewed by anyone who has the link, without signing in. Sharing is off by default and applies only to a space you choose to share.

You should not publish or share secrets, credentials, personal information, or other confidential information through these public features.

We use browser storage and similar local technologies to support app functionality, including session-related state, GitHub connection state, canvas preferences, and other product behavior.

We also use privacy-focused analytics tools to understand usage of the Service and improve the product.

We may share information with:

• service providers that help us operate the Service, such as Supabase, Stripe, analytics providers, hosting providers, email delivery and receiving providers, and AI model providers;
• third-party services you choose to connect, such as GitHub;
• law enforcement, regulators, or other parties when required by law or necessary to protect rights, safety, and the Service;
• a buyer, investor, successor, or affiliate in connection with a corporate transaction or reorganization.

We store information using a combination of service providers, hosted infrastructure, and local or cloud-backed systems used to operate WHAT IF. This may include authentication and database providers, payment processors, hosting providers, and local repository storage used for app functionality. Where you use email features, this also includes email providers that send our messages and receive mail addressed to you, and that hold those messages and their attachments on our behalf.

We keep information for as long as reasonably necessary to provide the Service, comply with law, resolve disputes, enforce our agreements, and protect the Service. Retention periods may vary depending on the type of information and how it is used.

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

WHAT IF is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, or to object to or limit certain processing. To make a request, contact us at [email protected] .

The Service may rely on providers and infrastructure that process information in the United States and other countries. By using the Service, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your own.

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice by updating the effective date, posting the revised policy in the Service, or using another reasonable method.

If you have questions about this Privacy Policy or our privacy practices, contact us at [email protected] .