Privacy Policy

1. What we collect

• Account details: your name, business name, email address and a securely hashed password.
• What you give us to plan an app: your descriptions, answers, uploaded screenshots or drawings, and links to websites you ask us to look at. For links, we read the publicly available pages of that site.
• Billing: your plan, billing status and the details Stripe shares with us, such as the card brand and last four digits. We never see or store full card numbers.
• Support: messages you send us through the dashboard or by email.
• Usage and security: pages visited, counted without cookies by Vercel Web Analytics; sign-up and sign-in events; IP addresses for rate limiting and fraud prevention; and server logs.
• Data in your apps: the records you and your team store in apps we run for you. We handle this on your behalf; see section 4.

2. How we use it

• to plan, build, test, host, update and support your apps;
• to run your account and billing, and to send service emails: verification, build updates, change requests, receipts and support replies;
• to keep the service secure and to prevent fraud, abuse and spam, including blocking automated sign-ups;
• to understand, in aggregate, how people use Makefield so we can improve it;
• to meet legal obligations.

If you're in the EEA or UK, our legal bases are: performing our contract with you; our legitimate interests in running, securing and improving the service; your consent where we ask for it; and legal obligations.

3. AI processing

We send your descriptions, answers, screenshots, the content of websites you link, and support messages to our AI model provider, through Vercel's AI gateway, to write plans, code and draft support replies. A person reviews every support reply before it's sent. Our model provider processes this under commercial terms that don't allow it to train its models on that data, and we don't use your information to train AI models either. The records stored in your apps are not sent to AI models as part of building them.

4. Data in your apps

You control the data your team stores in your apps, including any personal information about your staff or customers. We process it only to provide the service to you, under your instructions. Each app has its own private database that only that app can reach. We keep point-in-time backups for 7 days. Our staff access app data only when you ask us to, or when it's needed to fix a problem or keep the service secure. If someone asks us about data in your app, we'll refer them to you. A data processing agreement is available on request.

5. Who we share it with

We share information only with the service providers that run Makefield for us, under contracts that limit their use of it to providing their service:

We may also disclose information if the law requires it, to protect people's rights and safety, or as part of a merger or acquisition, in which case this policy continues to apply to it.

6. Where it's stored

Makefield and its providers store and process data in the United States. If you're outside the US, we rely on appropriate safeguards for transfers, such as the European Commission's Standard Contractual Clauses.

7. How long we keep it

• Account, billing and support records: while your account is open, then as long as needed for legal, tax and accounting purposes.
• Apps and their data: for 30 days after your subscription ends, then deleted. Backups expire within 7 days after that.
• Free previews: deleted when the preview ends, after 7 days. The plan stays in your account so you can build it later.
• Security and server logs: kept for a limited time, typically up to 90 days.

8. Cookies

We use one essential cookie to keep you signed in. Our analytics don't use cookies. Our bot protection runs a check in your browser to tell people from automated scripts. Stripe sets its own cookies on its checkout pages to process payments and prevent fraud.

9. Security

We use encryption in transit, hashed passwords, a private database for each app, isolated build environments, and access limited to the people who need it. No system is perfectly secure. If a breach affects your information, we'll tell you without undue delay.

10. Your rights

Depending on where you live, including under the GDPR and California law, you can ask to access, correct, export or delete your personal information, object to or restrict some uses, and withdraw consent. Email support@makefield.app and we'll respond within 30 days. We won't treat you differently for using these rights. If you're in the EEA or UK, you can also complain to your local data protection authority.

11. Children

Makefield is a business service for people aged 18 and over. We don't knowingly collect information from children.

12. Changes

If we change this policy in a meaningful way, we'll update the date above and email account holders before the change takes effect.