P-01
What we collect
Account details (email, authentication identifiers), the material you give a build (your dossier, prompts, uploads), the companies and content we generate for you, usage and billing records, and standard technical logs. We do not ask for more than a build needs.
P-02
Why we hold it
To run the builds you commission, keep your work available across sessions, meter and bill credits honestly, secure the platform, and support you. We process your data to provide the service, on the basis of our contract with you and our legitimate interest in operating it safely.
P-03
Owner-scoped by design
Your rows carry your identity and are isolated by database row-level security. Your dossier, builds, and records are reachable only as you — never by other users, and on the server only through service roles that never reach the browser.
P-04
Keys stay server-side
Provider keys and credentials you connect are stored encrypted and used only server-side. They are never exposed to the browser; diagnostics show presence and counts, never key material.
P-05
We don't sell your data
We do not sell your data or your customers' data, and we don't share it for others' advertising. Analytics beacons on a site you build measure that site for your own dashboard — not for us.
P-06
Sub-processors
We use a small set of infrastructure providers to run the service — hosting, database, AI model providers, payments, and email delivery. Each processes data only to perform its function, under contract. A current list is available on request.
P-07
Retention
We keep your data while your account is active and as needed for the purposes above. Deleting a company or your account removes its stored material from the platform's tables; backups age out on a rolling schedule, and legal/billing records are kept only as long as the law requires.
P-08
Your rights
You can access, export, correct, or delete your data from Settings, or by contacting us. Export is a download, not a negotiation. Depending on where you live, you may also have rights to object to or restrict certain processing.
P-09
International transfers
Our providers may process data in regions outside your own. Where they do, transfers rely on appropriate safeguards such as standard contractual clauses.
P-10
Contact
Questions, requests, or complaints: reach us through the in-app support channel or your account contact. We respond to rights requests within the timeframe the applicable law sets.