1. Who we are and scope
Superscore Labs, LLC (“Superscore,” “we,” “us,” or “our”) operates the AI creative service at superscore.ai. This Privacy Policy explains how we handle personal information through our website, accounts, canvases, media generation and editing tools, audience simulations, and integrations (the “Service”). Superscore is responsible for the processing described here, except where we process information on an organization’s instructions under a separate agreement.
For privacy questions or requests, contact support@superscore.ai. Our Terms of Service explain the rules for using the Service.
2. Information we collect
- Account information: email address, name, account identifiers, profile image if provided, sign-in information, verification and waitlist status, workspace memberships, and account preferences. Our authentication provider handles password credentials.
- Creative content: prompts, messages, uploaded images, videos and audio, character and avatar references, brand assets, imported website material, generated outputs, edits, comments, audience simulation results, and related settings and metadata. Media can include people’s faces, voices, likenesses, and other personal information.
- Purchase information: plan, credit balance and usage, payment and subscription identifiers, transaction status, and billing details. When payment is available, Stripe handles payment-card collection; our application does not receive your full card number or card security code.
- Connected-service information: information and credentials you authorize through an integration, such as messages and attachments submitted to an installed bot, selected repository content, connection identifiers, and access tokens needed for the connection.
- Technical and usage information: IP address, approximate country and first-level region, browser and device details, requests, timestamps, session information, generation and provider job identifiers, model settings, errors, performance, safety checks, and usage or cost records.
- Communications: information you send in feedback, support or privacy requests, and notification preferences, including a browser push subscription if you enable it.
We receive information directly from you, automatically when you use the Service, from people who share a workspace or content with you, and from providers or services you authorize. Please upload other people’s information only when you have the necessary rights and permissions.
3. Google sign-in and Google user data
If you choose “Continue with Google,” Google and our authentication provider supply information needed to identify and authenticate you, such as your Google account identifier, email address, verification status, name, and profile picture when available. We use and store this information to create or link your account, maintain your session, manage access, and protect the Service. We do not receive your Google password.
Signing in with Google alone does not give Superscore access to your Gmail messages, Google Drive files, or Google Calendar. A separate feature that requests additional Google permissions must explain the access and obtain authorization before using it.
We share Google sign-in information with authentication, hosting, and operational service providers only as needed for the uses described here. We do not sell Google user data or use Google sign-in information for advertising or general-purpose AI model training. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements where applicable.
You can revoke access in your Google Account connections settings. Revoking access does not automatically delete information already stored in your Superscore account; contact us to request deletion.
4. How we use information
We use information to operate accounts and workspaces; manage waitlist access; store, analyze, generate, edit and deliver content; run requested simulations; support collaboration and sharing; maintain integrations; meter credits and process billing; send account and service notifications; respond to requests; diagnose failures; prevent fraud, abuse and prohibited content; enforce our terms; and comply with legal obligations.
We also use operational information and feedback to understand and improve product reliability, performance, and usability. When consent is required for a particular use or communication, we request it and provide a way to withdraw it.
5. AI processing, faces and voices
When you request generation, editing, reference inspection, or an audience simulation, we send the relevant prompts, context and media to the AI and infrastructure providers that perform the work. This can include a whole file, selected frames, thumbnails, crops, audio, descriptions, or temporary access links. A workflow can use more than one model for planning, analysis, generation, or recovery.
Depending on the feature and model, processing may involve Vercel AI Gateway and providers such as Google, OpenAI, ByteDance, Black Forest Labs, Recraft, and other models offered in the Service. Provider availability can change. Upstream processing is governed by the applicable provider/API terms and our arrangements with those providers; retention and safety-review practices may differ by provider. This policy does not promise that every provider offers zero data retention.
Superscore does not currently train its own general-purpose generative models on customer inputs or outputs. Permission to process your content to deliver a requested feature is not a blanket permission for Superscore to use it for unrelated model training. We will explain material changes to these practices and obtain consent when required.
Avatar, reference and Remix features can analyze visible appearance, faces, body positions, motion and voices to provide the requested creative feature. Related descriptions, reference sheets and inspection results may be stored with the project. These features are not intended to identify an unknown person or authenticate someone’s identity. Depending on the processing and local law, face or voice information may receive special legal protection. You must have appropriate permissions from people depicted; a face mask or transformation does not replace those permissions.
8. Retention and deletion
We keep account information and saved creative content while needed to provide the Service, maintain your projects, and carry out the purposes described here. Retention depends on the type of information, account activity, requested services, and applicable legal, security and billing requirements; we do not apply one fixed retention period to every record.
Deleting a canvas item or project may remove it from your view without immediately erasing every stored file, original provider response, derivative, backup or operational record. Contact us for an account or personal-information deletion request. We may retain limited information as required for accounting, fraud prevention, disputes, legal obligations or enforcement, and backups may persist until replaced through ordinary backup cycles. Copies already shared with others or retained by external services are subject to their own controls and obligations.
9. Security and international processing
We use measures designed to protect information, including access controls and authenticated service connections. No online service or transmission method can guarantee absolute security. Keep your credentials secure and report suspected unauthorized access.
Superscore and its providers may process information in the United States and other countries, where privacy laws may differ from those where you live. Where applicable law requires safeguards for international transfers, we use the required transfer mechanisms and contractual protections. Contact us for information about the safeguards relevant to your data.
10. Your choices and privacy rights
Depending on where you live and the law that applies, you may have rights to access, correct, delete or obtain a copy of your personal information; restrict or object to processing; withdraw consent; or appeal a decision on a request. To make a request, email support@superscore.ai with enough information to locate the account or content. We may verify your identity or an authorized agent’s authority before responding. We will respond within the period required by applicable law and will not unlawfully discriminate against you for exercising your rights.
Where European Economic Area or UK law applies, our legal bases include performing our agreement with you, legitimate interests such as operating and securing the Service (balanced against your rights), consent where required, and compliance with law. You may complain to your local data-protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.
You can change available sharing and notification preferences in the Service, revoke external connections, and use unsubscribe links in marketing emails. Account, security and other essential service messages may still be sent.
11. Children
The Service is intended for adults aged 18 or older. We do not knowingly collect personal information from children under 18 for their own use of the Service. If you believe a child has provided information to us, contact us so we can investigate and take appropriate action.
12. Changes and contact
We may update this policy as the Service or our practices change. We will update the date above and provide additional notice or request consent when required by law. Questions about this policy, privacy rights or our handling of information can be sent to support@superscore.ai.