Security
Security & Data Handling
Poprica treats your images, brand assets, and payment data with the highest priority. Here is how we protect them, technically and operationally.
You own what you generate
Copyright in the images you generate with Poprica belongs to you. Commercial use is allowed. We never reuse your generated work without permission.
Data protection in transit and at rest
All traffic is encrypted with TLS. Uploaded images and generated files are stored in access-controlled cloud storage.
- All pages and APIs served over HTTPS (TLS)
- Image storage protected by row-level access control (RLS)
- Uploads are tied to your account and not visible to other users
Payment information
Card details never touch our servers — they are processed directly by Stripe, a PCI DSS-compliant payment provider. We never hold or store your card number.
Infrastructure
The application runs on Vercel; the database, authentication, and storage run on Supabase — both managed cloud platforms with industry-standard security.
Accounts and authentication
Authentication uses email or Google (OAuth), and passwords are stored hashed. We never see your password in plain text.
Data retention by plan
Generated files are retained in storage for the following periods. After expiry, you can regenerate for 1 coin if needed.
Contact
For questions about security or data handling, contact us at gracia@connectpiece.com.