Legal

Privacy Policy

Last updated: June 11, 2026

Alchemist PRO is a developer tool for converting websites into Angular/React projects and running accessibility audits. We collect only what we need to operate the service. We do not sell your data. We do not read your transmuted websites beyond what is necessary to process your request.

1. Who we are

Alchemist PRO ("we", "us", "our") operates the website at alchemist-pro.com and the associated Chrome extension. Contact us at privacy@alchemist-pro.com.

2. What we collect

Account information — when you sign up we collect your email address and (optionally) your full name via Supabase Auth. If you use Google OAuth, we receive your email and profile name from Google.

Billing information — Stripe handles all payment data. We never see or store your card number, CVV, or full payment details. We store only your Stripe Customer ID and subscription status in our database.

Usage data — we record how many transmutations you run per month, the source URL you transmuted, the framework chosen, and the number of pages captured. This is used to enforce plan limits and display your job history in the Dashboard.

Generated files — your output ZIPs are stored in Supabase Storage under your user ID. They are private — only you can download them. ZIPs expire automatically based on your plan (24 hours on Free, 30 days on Pro, never on Enterprise).

Chrome extension — the extension stores your Supabase access token and refresh token in Chrome's encrypted local storage. It does not read, capture, or transmit the content of pages you browse unless you explicitly click Transmute or Audit.

3. What we do NOT collect

Your browsing history
The content of pages you visit (unless you choose to transmute them)
Cookies from websites you browse
Any data from pages you visit in background tabs
Your IP address beyond what is logged by standard server infrastructure
Any data from children — our service is intended for users 16 and older

4. How we use your data

To create and manage your account
To enforce plan limits (usage_month counter)
To store and serve your generated ZIP files
To process subscription payments via Stripe
To send transactional emails (email verification, password reset) via Supabase
To display your job history in the Dashboard

We do not use your data for advertising, profiling, or any purpose beyond operating the service you signed up for.

5. Third-party services

We use the following sub-processors:

Supabase (supabase.com) — authentication, database, and file storage. Data is stored in the US by default. Supabase Privacy Policy →
Stripe (stripe.com) — payment processing and subscription management. Stripe Privacy Policy →

We do not share your data with any other third parties for commercial purposes.

6. Chrome extension — permissions explained

The extension requests the minimum permissions required to function.

activeTab — reads the URL of the tab you're currently viewing, only when you click the extension icon. Used to pre-fill the transmuter/auditor URL field.
storage — stores your login session (access token) in Chrome's encrypted local storage on your device only. Nothing is sent to our servers unless you explicitly press Transmute or Audit.
tabs — opens a new tab with the Alchemist PRO web app when you click Transmute or Audit.

The extension does not inject code into web pages beyond a minimal content script that listens for messages from the popup. It cannot read page content unless you explicitly trigger a transmutation.

7. Data retention

Account data — retained until you delete your account
Job records — retained until you delete your account or request removal
ZIP files — automatically deleted after expiry (24h Free / 30d Pro / never Enterprise)
Extension tokens — stored locally in Chrome, cleared when you sign out

8. Your rights

You may at any time:

Request a copy of all data we hold about you
Request deletion of your account and all associated data
Update your email address via account settings
Cancel your subscription at any time via the billing portal

To exercise these rights, email us at privacy@alchemist-pro.com. We will respond within 14 business days.

9. Security

All data in transit is encrypted with TLS. Data at rest in Supabase is encrypted. Row-Level Security policies ensure your data is accessible only to you. We perform regular reviews of access controls.

10. Changes to this policy

We may update this policy when our practices change. Material changes will be announced via email to registered users at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

11. Contact

Questions about this Privacy Policy? Email privacy@alchemist-pro.com.