Privacy Policy
FlashFounder is a platform that builds web sites and apps with AI. This page explains what data we collect, why, and who we share it with, both for account holders on the platform and for visitors of the sites published with it.
Data we collect from account holders
- Account data: your e-mail, name and picture when you sign in with Google or e-mail. If you use the platform without an account, a random key stored in your browser links your projects to you.
- Project content: the requests you write, your conversation with the assistant, files and images you upload, and your project's code and versions.
- Usage data: requests, tokens and cost, events such as creating or publishing a project, and technical error logs so we can fix them.
- Connections: if you link your own Supabase database, we store its URL and public key, and its management token if you provide one (encrypted).
- Credits and payments: credit and subscription records. The platform does not store card details.
Data of visitors to published sites
- When a visitor creates an account on a site built with FlashFounder, the account is stored in the site owner's own database, not ours. The site owner is responsible for that data.
- Confirmation and password-reset e-mails are sent by the platform on the site's behalf, so the visitor's e-mail address and the link pass through us only while sending. We record that an e-mail was sent, not the address.
- Google sign-in: when a visitor signs in with Google, the platform receives their name, e-mail and picture from Google, uses them only to create the account in the site's database, and does not keep them.
How we use data
- To run the platform: build, preview, publish and version your projects.
- To account for credits and usage, protect the platform from abuse, and fix faults.
- We do not sell your data or use it for advertising, and the platform runs no analytics or advertising trackers.
Service providers
- Supabase: the platform's database and sign-in.
- DeepSeek and Google Gemini: the AI models. Your requests, project content and images you upload for analysis are sent to them to produce a response.
- Cloudflare: runs your project's preview.
- Vercel: hosts published sites.
- Resend: sends e-mails to site visitors.
- Google: Google sign-in.
- Pexels: free stock media for projects.
- The platform's own server runs on Contabo in the European Union.
- Each provider handles data under its own privacy policy.
Cookies and browser storage
- We use cookies and browser storage only for what is necessary: your sign-in session, language, light or dark theme, the project key of visitors without an account, and small studio preferences.
Retention and deletion
- We keep your account and project data while your account exists. Empty drafts with no work in them are deleted automatically.
- You can ask for a copy of your data, or for your account and all its projects to be deleted, through the "Get in touch" button on the home page or at arfni333@gmail.com.
- A site visitor who wants their account deleted should ask the site owner, since the account lives in their database.
Security
- Connections to the platform are encrypted, management tokens are stored encrypted, and secret keys stay on our servers.
Changes and contact
- If we change this policy we will update the date below. For any question, use "Get in touch" or write to arfni333@gmail.com.