Privacy Policy

Last updated: Wed, 05 Feb 2025 00:00:00 GMT

Controller Information

Controller: Moriz Büsing
Address: Hermanngasse 9, 1070 Wien, Austria
Contact: [email protected]

Data We Collect

User Data

• Email address
• GitHub account information obtained through OAuth
• Repository information (names and file contents)
• Code from imported repos
• Figma design data (JSON representations of nodes)
• Generated code outputs from our service

Technical Data

• Usage data
• IP addresses
• Browser information
• Device information

How We Use Your Data

We process your data for the following purposes:

1. Authentication and account management
2. Providing our code generation service
3. Improving our service
4. Communication regarding service updates or support

Legal Basis for Processing

We process your data based on:

• Performance of our service contract with you
• Your consent
• Our legitimate interests in improving and securing our service

Data Sharing

We share your data with these service providers:

1. Fly.io - Application hosting
2. GitHub - Authentication and repository access
3. Supabase - Database hosting
4. Lemon Squeezy - Payment processing
5. Anthropic - AI processing

All providers process data in accordance with GDPR requirements.

Cookie Usage

We use only essential cookies for authentication purposes. Specifically:

• Authentication cookies from Supabase to maintain your login session
• No tracking or marketing cookies are used
• No third-party cookies are implemented
• Session cookies are deleted when you close your browser
• Persistent authentication cookies expire after 30 days

You can control cookie settings through your browser preferences. However, disabling authentication cookies will prevent you from using our service.

Data Retention

We retain your data for as long as you maintain an active account. Upon account deletion request, we will remove your data within 30 days.

Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request data erasure
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

Data Deletion

To request data deletion, email [email protected]. We will process your request within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit and at rest
• Access controls
• Regular security assessments

International Transfers

Your data may be transferred outside the EEA. We ensure appropriate safeguards through:

• Standard contractual clauses
• Adequacy decisions
• Privacy Shield compliance where applicable

Changes to This Policy

We may update this policy occasionally. We will notify you of significant changes via email.

Supervisory Authority

You have the right to lodge a complaint with your local data protection authority.