Account data — your email address, and optionally a username, display name and avatar. Your password is stored only as a one-way hash and we cannot read it; accounts created through a third-party sign-in have no password stored at all. If you enable two-factor authentication we store its secret. We record when you last signed in.

Billing data — your subscription state and the identifiers our payment provider gives us. Card numbers are entered on Stripe's systems and never reach ours.

Workspace content — pages, blocks, models, records, media files and site configuration you create. Depending on the features you use this can include the credentials of people who sign in to your site, and your customers' names, email addresses, phone numbers, delivery and billing addresses and order contents. We hold all of it on your instructions.

Request details — your IP address, browser user agent and referring page. We use them to apply rate limits and to investigate faults. They are not kept as a browsing log: rate-limit keys expire on their own within minutes, and fault reports carry the details only to our hosting and error-tracking providers.

Usage counters — API requests, bandwidth and storage totalled per organisation, used to apply your plan's limits and to bill you.

Audit records — significant actions inside a workspace, recorded with the account that performed them.

Error reports — when a request fails unexpectedly, a report naming the operation, the workspace and a stack trace is sent to Sentry.

Cookies — an authentication cookie that keeps you signed in, and your interface preferences. Our traffic analytics sets no cookies and does not identify you. See our Cookie Policy.

Privacy Policy

TL;DR

1. Data Controller

2. Information We Collect

3. How We Use Your Information

4. Legal Basis for Processing (GDPR)

5. Data Sharing & Third Parties

6. International Data Transfers

7. Data Retention

8. Your Rights

9. Children's Privacy

10. Changes to This Policy