Practical safeguards, explained plainly.

Stripe processes checkout, subscriptions, payment methods, and approved refunds. Payment actions are created on the server, and verified Stripe webhooks are the source of truth for subscription and credit changes. Full card numbers are not handled by AnyTemplate AI.

Saved templates, spreadsheets, and covers are tied to authenticated accounts. Database row-level access controls restrict user-owned records, and private cover files use signed access rather than public storage.

Sensitive provider keys and privileged database credentials remain on the server. Browser code receives only public configuration needed to establish an authenticated session.

Smart Spreadsheet requests go through a capability preflight. Unsupported requests do not proceed or consume credits, and temporary preflight failures stop safely. The spreadsheet engine uses validated formulas and does not run arbitrary JavaScript, macros, VBA, or external links.

Credits are reserved and finalized by the server. If a generation fails, the reserved credits are returned. Browsing categories, choosing a starter, editing a prompt, downloading, printing, exporting, and changing themes do not consume generation credits.

We do not claim SOC 2, HIPAA, ISO, GDPR, or PCI certification. Stripe maintains its own security and compliance program for payment processing.

Email support@anytemplateai.com with a clear description. Do not include passwords, authentication tokens, or full card information. Read our Privacy Policy for data-handling details.

AnyTemplate AI is operated by Dhaval “Dave” Patel in Texas, United States.