Privacy Policy

Last updated: March 2026

1. Information We Collect

We collect information you provide directly:

Account data: email address, name, and password (stored as a bcrypt hash).
Job inputs: prompts, reference URLs, and sketch images you submit to generate sites.
Billing data: payment information is handled by Stripe — we only store your Stripe customer ID.
Usage data: job history, token usage, and timestamps for billing and quota enforcement.

2. How We Use Your Information

To generate the sites and code you request.
To enforce plan quotas and process billing.
To send transactional emails (invite links, password resets) — only if email delivery is configured.
To maintain security audit logs of account and admin actions.

We do not use your inputs or generated outputs to train AI models.

3. Data Storage and Retention

Job artifacts are stored in your configured S3-compatible bucket. Account data is stored in a PostgreSQL database. You can request deletion of your account and associated data by contacting an admin.

4. Third-Party Services

Anthropic Claude API:job inputs are sent to Anthropic to generate code. Anthropic's privacy policy applies to this processing.
Stripe:payment processing. Stripe's privacy policy applies.
Vercel:optional preview deployments. Vercel's privacy policy applies.

5. Cookies

We use a single session cookie to keep you signed in. No tracking or analytics cookies are set.

6. Security

Passwords are hashed with bcrypt. Sessions are signed with a server-side secret. We maintain an audit log of all sensitive account actions.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting an admin through the dashboard.

8. Changes to This Policy

We may update this policy. Continued use of the service after changes are posted constitutes acceptance.