Privacy Policy

Who we are

Sushibelt is operated by Eag, a sole proprietorship (enkeltmandsvirksomhed), CVR 28897839. It is the data controller for the personal data described here.

Questions about your data or this policy: reach us by post at Skelbækgade 24, 2. tv, 1717 København V, Denmark.

1. What we collect

Account data (name, email), workflow and generation metadata, and billing records. Prompts and generated content are your data — we do not use them to train models.

2. Product analytics

If you opt in during onboarding (or later in Settings), we use PostHog, hosted in the EU, to understand product usage. Analytics are tied to your account and never capture your prompts or generated content. You can withdraw consent at any time in Settings.

3. Sub-processors

Running the service: Supabase (database and auth), Amazon Web Services (hosting, file storage and job queues), Resend (email), Cloudflare Turnstile (bot checks at signup), Stripe (billing and vendor payouts), and PostHog (product analytics, opt-in only, EU).

Running your workflows — only the providers a workflow routes a step to receive that step's inputs: Anthropic, OpenAI, Google (Gemini), Mistral, DeepSeek, xAI, Groq, Together AI, OpenRouter, Opper, Hugging Face, Fal.ai, Replicate, ElevenLabs, Tripo and Meshy.

Delivery to GitHub or GitLab uses your own account and token, and commits only what you deliver.

4. Retention

Generated output assets are deleted 7 days after creation. Account and billing records are retained for as long as your account is active, plus any period required by law.

5. Your rights

As an EU-based operator (Eag, Denmark), we support the access, correction, and deletion rights available to you under GDPR. You can exercise most of them yourself: download your data and delete your account from your profile, and correct your name and email there too. The last owner of a team can close it from the team's General settings, which deletes its projects, outputs, keys and connections; its billing records are kept for as long as the law requires. For anything else, contact us by post at Skelbækgade 24, 2. tv, 1717 København V, Denmark. You may also complain to the Danish Data Protection Agency (Datatilsynet).