Privacy Policy

What We Collect

We collect the minimum data required to provide the Service:

• ◆Account data: Email, name, and avatar from your OAuth provider (Google or GitHub).
• ◆Project specs: Text descriptions you provide for builds. Stored in your account, deleted when you delete the project.
• ◆Build logs: Orchestration events, worker logs, and QA results from your builds.
• ◆API keys: Encrypted at rest (AES-256). We never store or access plaintext keys.

What We Don't Collect

• ◆We do not sell your data to third parties.
• ◆We do not use your project specs or generated code for training.
• ◆We do not track you across other websites.

Third-Party Services

We use the following third-party services:

• ◆Supabase: Authentication and database hosting.
• ◆Stripe: Payment processing for subscriptions.
• ◆Anthropic / OpenAI: AI model providers (via your API keys or Claude Code session).

Data Retention

Build outputs are available for download for 30 days after completion. Build logs are retained for 90 days. Account data is deleted within 30 days of account deletion. You may request immediate deletion by contacting us.

Your Rights

You may export your data, delete your account, or request information about stored data at any time. Contact privacy@manyhands.dev.

Cookies

We use essential cookies for authentication (Supabase session tokens). We do not use tracking or advertising cookies.