Privacy Policy

Last updated: February 19, 2026

What we collect

  • Account info: Email and GitHub profile (via OAuth). No passwords stored.
  • Designs: Organization designs you save to the cloud.
  • API keys: Encrypted at rest (AES-256-GCM). Used only to run your Cloud Gateway.
  • Usage data: Basic analytics (page views, feature usage) via Vercel Analytics. No personal tracking.

What we don't do

  • We don't sell your data
  • We don't share your data with third parties (except infrastructure: Supabase, Vercel, Fly.io, Stripe)
  • We don't log your API keys or AI conversations
  • We don't use your data to train AI models

Data storage

  • Local-only mode: All data stays in your browser. Nothing sent to our servers.
  • Cloud mode: Data stored in Supabase (PostgreSQL) with Row Level Security.
  • Gateway: Runs on Fly.io in the region you choose. Destroyed when you stop it.

Your rights

You can:

  • Export all your data at any time
  • Delete your account and all associated data
  • Self-host the entire application (MIT License)

Cookies

We use essential cookies for authentication (Supabase session). No tracking cookies.

Contact

Questions about privacy? Open an issue on GitHub or email us at admin@frexida.com.