Privacy policy

1. What we collect

• Your account — your email address, your name, how you sign in, and the workspaces you belong to, with their members, invites and roles.
• Payments — what you bought, when, and whether the payment succeeded. Stripe processes the payment itself; we never receive or store your full card details.
• Workspaces in our cloud — the files, chats, apps and data you put in them, stored only to run your workspace. A workspace on your own computer stays there.
• A heartbeat — each linked workspace tells us hourly its version, where it runs and whether it is healthy. You can turn it off in the app under Settings › Privacy.
• Error reports — when something breaks in the apps, a workspace, our servers or this website, a report says what failed and where in our code — never your files, chats, prompts or keys. During the beta these cannot be turned off.

2. When you use the assistant

The assistant sends your request to the AI provider whose model you use — for example Anthropic for Claude, or OpenAI for ChatGPT — which processes it under its own terms to produce the answer. When you connect your own subscription, your workspace talks to that provider directly and the request does not pass through us.

3. Who processes data for us

• A payment processor, for card payments.
• An email provider, to send and receive our email — sign-in codes, support replies.
• Hosting providers, for our servers and cloud workspaces (in the EU) and for app downloads.
• An error-monitoring service, for error reports, stored in the EU.
• The AI provider whose model you use, when you use the assistant (above). Each processes data on our behalf, only for these purposes.

4. Cookies on this website

This website sets only the cookie it needs: your sign-in session. Your light or dark theme choice is kept in your browser’s storage. There are no advertising trackers and no third-party analytics.

We count visits and app downloads ourselves, without cookies. For each page you open we record the page, the site that linked to it, any campaign tags in the link, your time zone (to know roughly which country visits come from) and whether you are on a computer, phone or tablet. We do not store your IP address. To count the same person once per day, we combine your IP address and browser with a random value that we delete after a day, so a visit cannot be traced back to you or linked to another day. When you create an account, we note which visit that day it started from, so we can see which sites and campaigns bring people.

5. How long we keep it

We keep your account and workspace data while your account exists. When you ask us to delete your account, we delete its data within 30 days. A cancelled cloud workspace’s data is deleted 30 days after its last paid period. Payment and invoice records are kept as long as Romanian tax and accounting law requires. Error reports are kept for 90 days, and visit and download counts for two years.

6. Your rights

You can ask us for a copy of your personal data, to correct it, or to delete it — ask on the help page. You can change your name on your account page. If you think we have mishandled your data, you can complain to Romania’s data protection authority (ANSPDCP) or the one where you live.

7. Changes and contact

If this policy changes in a way that matters, we tell you by email first. Questions go through the help page or to support@alexandr.build. See also our terms of service.