Privacy Policy
Last updated: April 2026
What we collect
We collect your email address when you join the waitlist or sign in. We store the content of your sessions — your ideas, conversations, and generated specs — so you can return to them. We do not sell your data.
How we use it
Your email is used to send you sign-in links and product updates. Your session content is used to generate specs and apps on your behalf. We do not use your content to train AI models.
Third-party services
We use Supabase for authentication and data storage, Anthropic for AI generation, E2B for running sandboxed app environments, and Resend for transactional email. Each service has its own privacy policy.
Data retention
Your account and session data is retained while your account is active. You can request deletion at any time by emailing us.
Security
We use industry-standard practices including encrypted connections (HTTPS), secure authentication (magic links, no passwords), and row-level security on our database.
Contact
Questions? Email us at hello@boxytool.com.