Privacy Policy

Last updated: June 11, 2026

1. What we collect

Account data — name, email address, and authentication details, processed through our identity provider (Clerk).

Billing data — subscription and payment details, processed by Stripe. We never store full card numbers.

Product data — projects, sites, prompts, and generated concepts you create in the Service.

Usage and diagnostics — product analytics (PostHog, with session-replay text masking enabled) and error reports (Sentry, with personal identifiers scrubbed before transmission).

2. How we use it

We use your data to operate and improve the Service: authenticating you, generating site concepts you request, billing your subscription, providing support, and understanding aggregate product usage. We do not sell your personal data.

3. AI processing

Prompts and site context you submit for generation are sent to our AI provider (Anthropic) to produce your requested output. Generated results are stored in your workspace so you can revisit and share them.

4. Service providers

We share data with subprocessors only as needed to run the Service: Clerk (authentication), Stripe (payments), Supabase (database hosting), Vercel (application hosting), Trigger.dev (background jobs), Anthropic (AI generation), Resend (transactional email), PostHog (analytics), and Sentry (error monitoring).

5. Public share links

If you create a share link, anyone with that link can view the shared plan — without signing in — until the link expires. Shared pages display project content but never internal identifiers or parcel-owner names.

6. Retention and deletion

We retain your data while your account is active. When you delete your account, associated personal data is deleted or anonymized except where retention is required for legal, billing, or security purposes.

7. Security

All traffic is encrypted in transit (HTTPS). Access to production data is restricted, and webhooks from our payment and identity providers are signature-verified before processing.

8. Your rights

You may access, correct, export, or delete your personal data. Account and profile data can be managed in Settings; for anything else, contact us at the address below.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced through the Service or by email.

10. Contact

Privacy questions: privacy@krestengineers.com.