Privacy Policy

1. Data we collect

Account data: your name, email address, and password hash when you sign up, or your profile information when you sign in with a third-party provider.

Project data: the prompts you write, the sites and code generated for you, uploaded assets, and settings such as custom domains.

Billing data: subscription status and invoices are handled by our payment processor, Stripe. We never store your full card details.

Usage data: standard server logs (IP address, browser, pages visited) used for security, debugging, and improving the Service.

2. How we use your data

We use your data to operate the Service: generating and hosting your sites, processing payments, providing support, and keeping the platform secure. We do not sell your personal data.

Your prompts and project content are sent to the AI model providers we use (such as Anthropic, OpenAI, and Google) solely to generate your sites. These providers process the data under their own terms and do not receive your account credentials.

3. GitHub integration

If you connect GitHub, we store an access token so we can push and pull your project code on your behalf. Tokens are encrypted at rest with AES-256-GCM and are deleted immediately when you disconnect the integration.

4. Cookies

We use essential cookies to keep you signed in and to secure your session. We do not use third-party advertising or tracking cookies. Disabling essential cookies in your browser will prevent you from signing in.

5. Data retention and deletion

We keep your data for as long as your account is active. If you delete your account, or ask us to, we delete your personal data, projects, and published sites within 30 days, except where retention is required by law (for example, billing records).

6. Security

All traffic to the Service is encrypted with TLS. Secrets such as GitHub tokens are encrypted at rest, and access to production systems is restricted. No system is perfectly secure, so we encourage you to use a strong, unique password.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at the address below and we will respond within the timeframe required by applicable law.

8. Changes to this policy

We may update this policy as the Service evolves. Material changes will be announced on the site or by email, and the “Last updated” date above will always reflect the current version.

9. Contact

Privacy questions and data requests can be sent to support@noeron.net.