Privacy policy

Placeholder template, adapt to your product and jurisdiction before launch.

Data we store

Account data (name, email), workspace data you create, and AI usage metadata (tokens, model, cost). Prompt contents are not logged by the kit.

Analytics

PostHog autocapture is disabled and URL query strings are stripped before events leave the browser. Disable analytics entirely by omitting NEXT_PUBLIC_POSTHOG_KEY.

API keys

Your AI provider keys are stored AES-GCM encrypted and are never sent to the client.