Last updated 2026-09-12
These companies handle data on our behalf. Each one is here because the product needs it to work.
| Who | For | |
|---|---|---|
| Stripe | payments and billing | policy |
| Supabase | database and file storage | policy |
| Resend | transactional email | policy |
| Anthropic | AI features | policy |
| PostHog | product analytics and error tracking | policy |
| Railway | hosting | policy |
| Cloudflare | DNS and edge | policy |
Data is stored in the United States. When you delete your account, we keep it for 30 days, then permanently erased — except records we are required to keep for tax and financial reporting (booking amounts, platform fees and payout records), which are retained for 7 years with personal details minimised..
You can export everything the product holds about you, and you can delete your account, from inside the product — not by emailing us and waiting. If you are in a jurisdiction with statutory data rights (the UK, the EU, California and others), those rights apply to you and these controls are how you exercise them.
What we actually do is on the security page, stated plainly enough that you can check it.
Material changes are announced by email before they take effect.
Le Visage Refinery is operated by Le Visage Refinery LLC. Questions about this page: [email protected].