Privacy, in plain language.
Effective September 20, 2026
What we collect
When you sign in, we receive basic identity information from the provider you choose, including your email, display name, profile image when supplied, and provider account identifier. We store your chosen username, profile details, workflows, saves, collections, follows, comments, reports, and outcome submissions. Launch-list signups include your email, country, consent, and optional interests. We also store uploaded example images and your optional weekly digest preference. Images are resized and reconstructed without their original metadata.
What is public
Published workflows and their attached images, profile names and usernames, bios, public collections, comments, and aggregate engagement may be public. Private saves and private collections are visible only to their owner. Unlisted content is accessible to anyone with its link. Your account email and individual browsing activity are not displayed publicly.
Product measurement
Sundog records first-party workflow views and copies to show creators aggregate statistics. A random first-party cookie approximates anonymous visitors; its server-side identifier is hashed. We do not use invasive device fingerprinting. We may record a coarse referral source and campaign label. IP-derived hashes are used temporarily for rate limiting.
Optional analytics
We use Vercel Web Analytics for aggregate site measurement. If you opt in, Google Analytics measures visits and Microsoft Clarity helps us understand interactions through session analysis. These providers process data under their own policies. Optional scripts load after consent. You can change your choice through Cookie preferences in the footer. We use Sentry for technical error reports, with user identity, cookies, request bodies, and query parameters excluded. Do not put sensitive personal information into public workflow content.
Service providers
Vercel hosts the application. DigitalOcean stores application data in PostgreSQL. Resend delivers sign-in and requested subscription emails. Google or GitHub handles sign-in if you select that provider. Data may be processed outside your country. Sundog does not sell personal data or obtain access to the accounts used by your AI agent.
Email and subscriptions
Launch-list emails require consent and confirmation. Each subscription has an unsubscribe link. Sign-in emails are transactional. We do not automatically send every in-app notification as an email.
Retention
Detailed product events are retained for up to 180 days. Expired rate-limit entries, sign-in tokens, and sessions are regularly removed. Account and content records remain while needed to provide the service. When you delete your account, we remove profile information and private engagement and withdraw your workflows from public view. Historical revisions and moderation records may remain to preserve attribution, investigate abuse, and meet applicable obligations. Infrastructure backups may retain earlier copies until their rotation expires.
Your choices
You can edit your profile, export account data, and delete your account in Settings. Unsubscribe from launch updates using the link in your email. For access, correction, deletion, or other privacy requests, contact pranavmore.psm@gmail.com from the address associated with your account.
Security and sensitive information
Connections use HTTPS. Access controls protect private pages and administrative actions. No service can guarantee absolute security. Never submit passwords, payment-card details, API keys, authentication tokens, private email exports, or confidential documents as workflow content.