← Back to home

Privacy Policy

Effective June 27, 2026

This page is maintained by App Builder Hub to answer common questions about the Service. It is not legal advice.

1. What we collect

Account data: name, email, and authentication metadata.

Billing data: handled by PayPal (our payment processor). We receive transaction IDs, plan tier, and purchase status. We do not see or store your full payment card details.

Product data: projects, memory entries, prompts, chat history, audit results, and other content you create inside the Service.

Usage data: pages visited, feature usage, error logs, IP address, and device/browser metadata for diagnostics and abuse prevention.

2. How we use it

To operate the Service (auth, storage, AI processing), provide support, send transactional and product email, prevent fraud, and improve features. We do not sell your personal data.

3. AI processing

Prompts and project context you submit to Copilot or audit features are sent to AI model providers (e.g. Anthropic, OpenAI, Google) through Lovable AI Gateway to generate responses. Providers process content under their own terms and typically do not train on API-tier inputs.

4. Subprocessors

We use the following providers to run the Service:

  • Supabase — database, auth, storage
  • Cloudflare — hosting and edge runtime
  • PayPal — payment processing
  • Lovable AI Gateway — routes requests to model providers
  • Resend — transactional email
  • Cal.com — booking (Founder tier only)

5. Cookies

We use cookies for authentication sessions. Analytics, if enabled, uses privacy-respecting providers.

6. Retention

We keep account and project data while your account is active. You can delete projects and chat sessions in-app. On account deletion request, we remove personal data within 30 days, excluding records we must retain for tax, accounting, or legal obligations.

7. Your rights

Depending on your location (GDPR, CCPA, etc.) you may have rights to access, correct, export, or delete your data. Email support@johnnybodegas.com to make a request.

8. Security

Data is encrypted in transit (TLS) and at rest by our hosting providers. Access to production systems is restricted to authorized personnel. No system is 100% secure — report suspected vulnerabilities to support@johnnybodegas.com.

9. International transfers

Your data may be processed in the United States, EU, and other regions where our subprocessors operate.

10. Children

The Service is not intended for users under 16. Do not use it if you are under that age.

11. Changes

We will post updates to this page and update the effective date. Material changes will be announced in-app or by email.

12. Contact

Privacy questions: support@johnnybodegas.com. See also our Terms and Refund Policy.