What we collect. What we don’t.

Data we collect

• Account. Email address, name if provided, and the Firebase UID we use to identify your account.
• Usage. API calls you make (mode, voice, duration, charge), API keys you create and revoke, personas you create or edit.
• Payments. Stripe handles card data directly. We store your customer ID, purchase amounts, and the credit balance they fund.
• Product analytics. If you accept cookies, we record pageviews and UI interactions through PostHog (EU region) to understand which parts of the product work. You can decline at any time via the Cookies link in the footer.
• Voice input. Text you send to /v1/generate is processed to produce audio. Cinematic-mode context is sent to our model provider to draft the script. We do not store request bodies beyond what is needed to produce and log the response.

What we don't collect

We don’t sell your data. We don’t run ad trackers. We don’t fingerprint you across sites. We don’t retain audio you generate beyond the response itself.

Service providers

We share data only with processors that help us run the service:

• Google Firebase — authentication.
• Google Cloud Run — API hosting (europe-west1).
• Stripe — payment processing.
• PostHog — product analytics (EU region).
• Model and speech providers under confidentiality agreements to produce your generated audio.

Cookies

himaia sets cookies only after you accept the consent prompt. The cookies we set are first-party analytics cookies from PostHog (identifier, session ID). A Firebase session cookie is set after you sign in, to keep you logged in.

Your rights

You can request a copy of your data, correct it, export it, or delete your account at any time by emailing support@fuselink.app. EU/UK residents have the additional rights granted by the GDPR; California residents have the rights granted by the CCPA. We respond within 30 days.

Retention

Account and usage records are kept while your account is active and up to 24 months after closure for tax and abuse reasons. Analytics events are retained for 12 months and then aggregated.

International transfers

Our API runs in the EU (Google Cloud europe-west1) and our analytics are in the EU (PostHog Frankfurt). Auth, payments, and some model providers are US-based; we rely on Standard Contractual Clauses for those transfers.

Changes

If we change this policy in a material way, we’ll update the effective date above and notify active users by email at least 30 days in advance.

Contact

Fuse Link Inc.
support@fuselink.app