← Back

Privacy Policy

Last updated: [DATE]

1. What we collect

When you create an account, we collect:

  • Your email address and name
  • Authentication data (hashed passwords, OAuth provider IDs)
  • Data you store in projects you create — database rows, files, and end-user records for applications you build
  • Basic technical data needed to operate the Service (session cookies)

2. Cookies

We use essential cookies only: to keep you signed in, and to remember interface preferences like theme and sidebar state. We do not use advertising or analytics tracking cookies.

3. How we use your data

We use collected data to:

  • Provide, maintain, and secure the Service
  • Authenticate you and protect your account
  • Communicate service-related notices (not marketing, unless you opt in)

4. Data you store

Data you store in your own projects — database rows, files, and your own end users' records — belongs to you. We do not inspect, sell, or share it, except as necessary to operate the Service or when required by law.

5. Third-party services

Depending on which features you enable, your data may pass through third-party providers you configure — for example an email delivery provider for magic links and invites, or a file storage provider. These are services you connect with your own credentials.

6. Data retention

We retain account and project data for as long as your account is active. You can delete a project or your account at any time; deletion removes the associated data from our systems.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. Contact us at [YOUR CONTACT EMAIL] to exercise these rights.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date.

9. Contact

Questions about this Privacy Policy can be sent to [YOUR CONTACT EMAIL].

This is a general-purpose template and has not been reviewed by a lawyer. If you handle EU users' data, GDPR imposes specific requirements (lawful basis, DPA with sub-processors, breach notification, etc.) beyond this template — get real legal review before production launch.