Last updated: 8 September 2026
This policy describes what AirPunk does with your data — what we collect, why, who else processes it, and how you get it back or delete it. It is written to match what the product actually does, not to cover every hypothetical.
Authentication is handled by Clerk. We receive an account identifier, your email address, and — if you sign in with Apple or Google — the identifier that provider returns. We never receive or store your password. If you use Sign in with Apple with Private Relay, we only ever see the relay address, never your real one.
Display name, avatar image URL and bio. All optional.
Brand name, mission, product descriptions and prices, target audience, visual references and any assets you upload. This is the raw material the system works from.
Generated websites, product pages, ad creative, copy, images and video, plus the missions, quality scores and generation history behind them.
When someone buys from a site AirPunk built for you, we process the order — buyer email, order contents and amounts — so it can be recorded and fulfilled. Payment card details are handled by Stripe and never reach AirPunk's servers.
Your subscription and credit balance. On the web, payment is processed by Stripe; on iOS, by Apple through RevenueCat. In both cases we store the resulting state, not your card.
Server logs, IP address, browser and device information, error reports, usage events, and per-mission accounting of the AI capacity a generation consumed.
On iOS, a device token so Apple can deliver notifications you asked for.
AirPunk runs on third-party infrastructure. These are the providers that may process your data, and what each one does:
| Provider | What it does |
|---|---|
| Clerk | Authentication and identity, including Sign in with Apple and Google |
| Stripe | Payments — AirPunk subscriptions and checkout on your storefronts |
| Apple & RevenueCat | In-app purchases and receipts on iOS |
| Anthropic | Text and reasoning generation |
| OpenAI | Text and image generation |
| Replicate | Image and video model hosting |
| Cloudflare R2 | Storage and delivery of generated assets |
| Neon | The PostgreSQL database |
| Render | Application and site hosting |
| Resend | Transactional and order email |
| Apple (APNs) | Push notification delivery |
| Sentry | Error monitoring |
| Meta | Advertising campaigns — only if you use the advertising features |
The brand information you enter is sent to the AI providers above so they can generate your content. We use their business API offerings; their handling of submitted content is governed by their own terms. We do not sell your data, and we do not use your content to train our own models.
Several of these providers are established in the United States. Transfers outside the EEA rely on the European Commission's Standard Contractual Clauses or an equivalent adequacy mechanism.
Under the GDPR you may access, correct, export, delete or restrict your personal data, object to processing, and withdraw consent where processing is based on it. Two of these are built into the product rather than left to email:
GET /api/v1/users/{your-id}/export. You can only export your own data.
For anything else — or if you would rather we did it — write to airpunk@thesocialcie.com. You also have the right to lodge a complaint with the French data protection authority, the CNIL.
Account and brand data: for as long as your account exists. After deletion we remove it, except what we are legally required to retain — invoices and accounting records are kept for 10 years under French law — and the minimum needed to prevent abuse and fraud.
Before AirPunk opened to the public we ran a waitlist. Those historical signups are retained as a record; the waitlist itself is closed and no longer collects anything. Write to us to have yours removed.
This marketing site sets no cookies and runs no analytics or advertising trackers. Inside the application, browser storage is used strictly to keep you signed in (via Clerk) and to remember interface state such as your active brand. We do not use advertising cookies on our own surfaces.
AirPunk is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.
Data is encrypted in transit. Access to production systems is restricted, credentials are held outside the codebase, and payment credentials never touch our servers. No system is perfectly secure, and we will notify you and the CNIL as required if a breach affects your data.
If we change how we handle your data, we update this page and the date at the top. Material changes will be communicated to account holders.