Privacy Policy
Privacy Policy
This policy explains how Bestia Technologies Inc. collects, uses, and protects personal data when you use superpwr.ai.
Effective October 28, 2026
Who we are
superpwr is operated by Bestia Technologies Inc., a United States company based in Los Angeles, CA. If you have privacy questions, contact privacy@superpwr.ai.
Information we collect
We collect the minimum information needed to run the service.
- Account data, including your name and email address, when you sign in with Google OAuth.
- Payment and billing records processed through Stripe. We do not store full payment card numbers on our servers.
- Usage data such as account activity, requests made to the platform, and technical logs used to operate and secure the service.
- AI conversation content, prompts, attachments, and outputs that you submit so the platform can build and operate your apps.
- Phone numbers you provide for SuperPwr text messages and for the platform's voice features.
- SMS opt-in records, including the timestamp of consent, the exact consent text shown, and any subsequent opt-out events.
- Call recordings, transcripts, and conversation logs generated during AI-assisted phone calls.
- Voice emotion analysis data processed during calls to improve conversation quality and adapt AI responses.
- Call metadata including duration, timestamps, call disposition, and telecommunication routing information.
How we use personal data
We use personal data to authenticate users, process payments, provide customer support, secure the platform, improve reliability, and deliver the AI-powered app manufacturing service. We do not sell personal data.
Service providers and processors
We rely on third-party providers to run the service. These providers may process personal data on our behalf:
- Google for OAuth authentication and, when you connect a mailbox, Gmail access as described in Google user data.
- Stripe for payments and billing operations.
- Anthropic, OpenAI, Google, and DeepSeek for AI model processing.
- Render for application hosting and infrastructure.
- Neon for database hosting.
- Microsoft Clarity for usage recording, with all text masked, as described in Usage recording.
- Resend for transactional email delivery.
- Cloudflare for CDN, storage, and edge delivery services.
- Twilio for telecommunications infrastructure, including SMS delivery, phone number provisioning, call routing, and call recording.
- Hume AI for voice emotion detection and speech-to-speech AI processing.
- MiniMax for AI voice synthesis and text-to-speech services.
Cookies and tracking
We use session cookies required to keep you signed in and operate the platform. With your OK, Microsoft Clarity also sets cookies so a visit hangs together (see Usage recording below). We do not use advertising trackers or cross-site behavioral tracking cookies.
Usage recording
We record how superpwr.ai and the superpwr app are used, so we can see where people get stuck and make it easier. This covers visitors, clients and our own team. We use Microsoft Clarity, which records scrolling, clicks, mouse movement and the pages you visit.
What stays hidden. Every word on screen and anything you type is masked in your browser before anything is sent. We never record pages whose address holds a sign-in link, an invitation or a key.
Your choice. The first time you visit, a note asks. Nothing is recorded until you say OK, wherever you are. OK lets Clarity record and set cookies so your visit hangs together. No thanks, or not choosing, means nothing loads. Change it any time from Privacy preferences at the foot of this site, or Settings, Recording, in the app.
What we attach. Which part of the product you were in and, in the app, your workspace name and whether you are on our team. Never your name, email or phone number.
Guided tests. Sometimes we invite you to a short guided test in your workspace. It asks for its own consent first. It also notes each step, how long it took, and any notes you give us. It never notes what you type into forms or messages. Saying no to its screen replay turns recording off for you everywhere.
Who sees it and for how long. The superpwr team only. Microsoft processes recordings for us under the Microsoft Privacy Statement, and keeps them for its standard retention. Guided test notes are kept for 90 days. Recordings are never used for advertising, sold, or linked to an ad account. To have yours deleted, email privacy@superpwr.ai.
Voice and call data
When you use the platform's voice calling features, we process call recordings, transcripts, and voice analysis data on your behalf. Call recordings are retained for up to 90 days unless you request earlier deletion. Transcripts and call metadata may be retained longer to support your account history and platform analytics.
We do not use call recordings or voice data to train general-purpose AI models outside of your account. Call data is processed solely to deliver the voice agent service, improve call quality for your account, and comply with legal obligations.
You may request deletion of specific call recordings or all voice data associated with your account at any time by contacting privacy@superpwr.ai.
Mobile information and SMS / text messaging
What we collect. When you opt in to SuperPwr text messages from (323) 601-0788, we collect your mobile number, your consent record (the date and time, IP address, device or browser details, the page where you agreed, and the exact consent text you saw), the content of messages we send you and messages you send to SuperPwr or SuperAssist, delivery status, and any opt-out or opt-in keywords you send.
How we use it. We use this information only to send the messages you asked for (project task reminders, approval requests, project updates, security and account alerts, and SuperAssist replies), to let SuperAssist understand and act on the texts you send it within your account, to keep records of your consent and opt-outs, to secure the service, and to meet legal obligations. We do not use SMS for marketing or promotional messages.
No sharing for marketing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We do not sell, rent, or share your mobile number, SMS opt-in data, or consent with any third party for their marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers who help us deliver messages, under contract, who may not use it for their own purposes.
Service providers. We share mobile information only with service providers that help us deliver the service, under contracts that limit their use of it to providing services to us. These include Twilio, which delivers text messages, and the AI model providers listed above, which process the content of SuperAssist conversations so it can reply. They may not use your information for their own purposes, including marketing.
Message frequency and costs. Frequency varies with your activity; most people receive 1 to 30 messages per month. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
Opt-out and help. Reply STOP to any message to stop texts, and START to resume. Reply HELP for help, or email privacy@superpwr.ai. You can also change text preferences in your Notifications settings in the SuperPwr app. The full SMS program terms are in our SMS Terms, and a public preview of the consent step is at www.superpwr.ai/sms-consent.
Retention. We keep consent and opt-out records for the life of your account plus five years. We keep SMS message content for as long as your account is open, then delete it within 30 days of account deletion unless law requires otherwise. We delete phone numbers within 30 days of account deletion, unless law requires otherwise.
Email from SuperAssist. SuperAssist may email you from assist@assist.superpwr.ai with the same kinds of updates. You can turn email notifications off in your settings. We do not share your email address with third parties for their marketing.
Google user data
What we access. When you sign in with Google, we receive your name, email address and profile picture. If you are an account manager and choose to connect your mailbox, we ask Google for two Gmail permissions only: gmail.compose, to create, read back, change and delete the drafts superpwr prepares for you, and gmail.send, to send an email after you approve that exact draft. If you separately turn on inbox watching for your assistant, we ask for gmail.readonly, on its own, so the assistant can read new messages addressed to it. We never ask for read and send in the same request, and we do not ask for any other Google data.
How we use it. We use Google user data only to provide the features you turned on: signing you in, preparing and sending the emails you approve, and, where you turned it on, letting your assistant read and act on mail sent to it. Nothing is sent without a person approving it first.
How we store it.The permission Google gives us (the refresh token) is stored encrypted in our credential vault. Short-lived access tokens are created when needed and are not stored. Email content we process is kept only as part of your account's records, under the retention terms on this page, and is deleted with your account.
How we share it. We do not sell Google user data. We do not use it for advertising, and we do not allow people to read it, except with your permission, for security, or where the law requires. We do not use Google user data to develop, improve or train generalized or non-personalized AI or machine learning models. When you ask the assistant to work with an email, its content may be processed by the AI model providers listed above only to complete that request, under contracts that do not let them keep it or train on it.
Retention, deletion and revoking access. We keep the stored permission until you disconnect your mailbox, delete your account, or remove superpwr from your Google Account permissions. When any of those happens, we delete the stored permission within 30 days. You can also ask us to delete it at any time at privacy@superpwr.ai.
Limited Use.superpwr's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Retention and deletion
We retain account information while your account remains active. If you ask us to delete your account, we will delete or anonymize personal data unless we need to keep limited records for security, legal compliance, billing, or fraud prevention.
Your rights
You may request access to your data, correction of inaccurate information, deletion of your data, or an export of portable account information. California residents may also request details about their rights under the California Consumer Privacy Act (CCPA). To make a request, email privacy@superpwr.ai.
This includes the right to request deletion of call recordings, transcripts, voice emotion data, SMS records, and consent records. We will process deletion requests within 30 days, subject to any legal retention obligations.
Security
We use reasonable technical and organizational safeguards to protect personal data. No system is perfectly secure, so you should also protect your credentials and review app outputs before using them in production.
Contact
Privacy questions, data access requests, and deletion requests can be sent to privacy@superpwr.ai. Bestia Technologies Inc., Los Angeles, CA.