Privacy Policy

1. Introduction

Breakdown is operated by Dalton Creative in Dallas, Texas ("we," "us," or "our") at breakdown.works (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using Breakdown, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information: When you sign up for Breakdown or become a Founding Member, we collect your email address and payment information (processed securely by Stripe — we never store your card details).

Content You Submit: URLs, files, text, briefs, brand information, formats, and reference works you submit. This content may be stored in a saved Canvas and processed to produce analyses, attributes, concepts, treatments, moodboards, and exports.

Produced Content: Structured analyses, concepts, images, treatments, moodboards, exports, and provenance created through the Service.

Operational Data: Requests, model/provider usage, quota events, errors, subscription state, consent receipts, and security logs needed to run and protect the Service.

Optional Analytics: If you choose Allow Analytics, PostHog receives page paths, feature events, an account identifier after sign-in, and plan status. Query strings are stripped. Autocapture and session replay are disabled. We do not send your email, briefs, reference content, or Stripe Checkout Session IDs in client analytics.

Browser Storage: Supabase uses browser storage to maintain your signed-in session. Breakdown uses local storage for preferences, your analytics choice, and an unsynced Canvas draft when cloud save is unavailable. We do not use advertising cookies.

3. How We Use Your Information

We use the information we collect to:

• —Provide, maintain, and improve the Service
• —Process transactions and send related information (receipts, confirmations)
• —Send you the Weekly Breakdown newsletter (if you opted in)
• —Respond to your requests and support inquiries
• —Monitor and analyze usage patterns to improve the product

4. Data Storage & Security

Account records and Canvas documents are stored with Supabase. Files and generated media may be stored with Supabase Storage or Vercel Blob. Signed-in Canvas documents are isolated by account. Some legacy and guest-upload media is stored at an unlisted, hard-to-guess public asset URL so browsers and model providers can read it; anyone with that exact URL may be able to view it. Do not submit trade secrets, regulated data, or material you cannot permit our processors to access. Data is encrypted in transit using TLS. Stripe handles card information; Breakdown does not store full card numbers.

5. Data Sharing

We do not sell your personal information. We share data only with:

• —Stripe — subscriptions, invoices, refunds, and payment processing
• —Supabase — authentication, database records, and private storage
• —Vercel and Vercel Blob — hosting, serverless functions, AI routing, and media storage
• —Google Gemini, DeepSeek, OpenAI, Black Forest Labs, and fal.ai — analysis, concept development, and generated media when the relevant feature is used
• —Firecrawl, Cobalt, YouTube, and Brandfetch — public URL, video, product, and brand intake when you ask Breakdown to read those sources
• —Resend — transactional email and newsletters you request
• —PostHog — optional, privacy-limited product analytics after you consent

6. Your Rights

You have the right to:

• —Access the personal data we hold about you
• —Request correction of inaccurate data
• —Request deletion of your data and account
• —Export your account data and saved Canvases
• —Withdraw optional analytics consent by clearing site data or changing your saved choice
• —Opt out of marketing communications at any time

6b. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to:

• —Know what personal information we collect about you and how it is used
• —Request deletion of your personal information
• —Opt out of the sale of personal information (we do not sell personal information)
• —Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at hello@breakdown.works.

7. Data Retention

Account content remains until you delete it or delete your account. Canceling a subscription does not automatically delete your work. Account deletion attempts to cancel billing first, then removes account-owned database records, saved Canvases, and media stored under your account paths. Stripe may retain transaction records required for financial, fraud-prevention, and legal obligations. Security logs, backups, provider records, and de-identified operational data may persist for a limited period under provider retention schedules. Email signup data remains until you unsubscribe or delete your account.

8. Children's Privacy

Breakdown is not directed to individuals under 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 16, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be posted with a new version date and, when appropriate, sent to the account email. Checkout records the policy version accepted for that purchase.

10. Contact

For privacy-related questions or data requests, contact us at hello@breakdown.works.