Privacy Policy

Account information. Your email address and authentication credentials when you create an account.

Billing information. Subscription details and payment status. Payment card details are collected and processed directly by Stripe; we never see or store full card numbers.

Site content. The content, images, configuration, and AI-builder conversations associated with the websites you create, stored so we can build, preview, and publish your sites.

Usage and technical data. Plan usage metrics (storage, bandwidth, AI credit consumption), deployment events, audit logs, IP addresses, and browser/device information used to secure and operate the Service.

Consent records. When you create an account or accept an updated version of our Terms of Service or this Privacy Policy, we record which versions you accepted, when, and the IP address and browser information of that request.

Communications. Records of support requests and other correspondence with us.

• Provide, operate, and maintain the Service, including provisioning, hosting, and publishing your sites.
• Process subscriptions, payments, and plan-limit enforcement.
• Power the AI builder features you invoke.
• Monitor performance, prevent abuse, and secure the platform.
• Respond to support requests and send service-related notices (such as security or billing alerts).
• Keep evidence that you agreed to our Terms of Service and this Privacy Policy.
• Comply with legal obligations.

When you use the AI builder, your prompts and project context are sent to the large-language-model providers we use to power those features. We use this traffic only to provide the builder functionality — we do not use your site content to train our own models. Builder conversations are stored with your project so you can resume work across sessions.

We do not sell your personal information. We share data only with the service providers needed to operate the Service, each bound by contractual confidentiality and data-protection obligations:

• Stripe — payment processing.
• Supabase / PostgreSQL hosting — account and site databases.
• Cloudflare — DNS, TLS, and content delivery for published sites.
• Object storage (S3-compatible) — published site assets and source exports.
• LLM providers — AI builder features, as described above.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of the Service and its users. If Maldonado Cloud LLC is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction with notice to you.

We retain account and site data for as long as your account is active. When you delete a site, its builder workspace and published assets are removed from active systems; residual copies in backups expire on a rolling schedule. Audit, consent, and billing records may be retained longer where required for legal, tax, or security purposes.

We protect your data with encryption in transit (TLS), encryption at rest for stored secrets, secret management through a dedicated vault, access controls, and continuous monitoring. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

You can:

• Access and export your site source at any time using the built-in source export feature.
• Correct your account information from the dashboard settings.
• Delete your sites, or your entire account, from the dashboard or by contacting us.
• Object to or restrict certain processing by contacting us.

Depending on where you live (for example, the EEA, UK, or certain US states), you may have additional statutory rights. Contact us to exercise any of them and we will respond within the required timeframe.

We use a small number of strictly necessary cookies and browser local-storage entries for authentication sessions and interface preferences (such as your theme). We do not use third-party advertising or cross-site tracking cookies.

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We process and store data in the regions where our infrastructure and sub-processors operate. By using the Service, you understand that your information may be transferred to and processed in jurisdictions with different data-protection laws than your own; we apply the safeguards described in this Policy wherever the data is processed.

We may update this Policy from time to time. For material changes, we will notify you by email or through the Service before the change takes effect. The “last updated” date at the top of this page always reflects the current version.

Questions, requests, or concerns about this Policy or your data? Email us at support@maldonadocloud.com.