Subprocessors

Cloud infrastructure hosting (Container Apps, PostgreSQL, Static Web Apps, Blob Storage)

Data processed: Application code, databases, user-uploaded assets, server logs

Authentication and identity management for platform and customer applications

Data processed: Email address, name, login activity, session data

Payment processing for platform billing and customer application payments

Data processed: Name, email, payment method details, transaction history

AI code generation and natural language processing (Claude API)

Data processed: Application descriptions, chat transcripts, code generation prompts

Platform database hosting (PostgreSQL)

Data processed: Platform account data, project metadata, encrypted credentials

Source code hosting for generated applications, CI/CD pipelines

Data processed: Generated application code, GitHub OAuth tokens

Transactional email delivery (build notifications, team invites, dunning emails)

Data processed: Recipient email address, email content

Product analytics (page views, feature usage, session recording)

Data processed: Anonymised user ID, IP address (for geolocation), interaction events

Error monitoring and performance tracking

Data processed: Error stack traces, request metadata (no personal data in payloads)

Rate limiting (Redis-based sliding window)

Data processed: IP addresses, request counts (no personal data stored)

Customer support ticketing and help centre for generated applications

Data processed: Customer app end-user support interactions (provisioned per customer)

Project board integration (optional, customer-connected)

Data processed: Board item titles and descriptions, OAuth tokens (encrypted)

Project board integration (optional, customer-connected)

Data processed: Issue titles and descriptions, OAuth tokens (encrypted)