Privacy notice

Version 2026-10-12. Applies to builders — people who make apps on the platform.

What we keep about you

• Your name, email address, and how you sign in (password hash, connected Google/GitHub/Microsoft account, passkeys, two-factor settings).
• Your sessions: when you signed in, the browser and an IP address, so you can see and end them.
• An audit trail of what was done in the dashboard (for example "key issued", "project created"), with counts and names, never secret values.
• When you accepted these terms, and which version.

What the platform admin sees

• The number of builders; each builder's name, email, join date and status.
• Each project's name, address (slug), status, creation date, whether its database answers, and how many people use it.
• Who uses which app (the platform's user list).

The admin dashboard does not open your project's pages, database contents, keys, files or settings. Database connection strings are stored encrypted (AES-256-GCM). Like any hosted service, people who operate the servers could technically reach stored data; the platform is built so that doing so is not part of any normal screen and is recorded.

Your app's users

When people sign in to your app, the platform stores their account (name, email, sign-in methods) on your behalf. You decide what your app does with their data; tell them in your own privacy notice.

Where it lives

The hub runs on Vercel; its own database is on Neon (PostgreSQL); email goes through Resend; the "I am human" check is Cloudflare Turnstile. Databases the hub creates for your projects live on Neon or Turso.

How long

• Your account and projects: until you ask for deletion (or the beta ends — see the Terms).
• Audit trail and sign-in records: kept for at most a year, then deleted by the hourly maintenance job.

Your choices

You can see and end your sessions, export your projects' data from their database, and ask for everything to be deleted.