Legal
Privacy.
Last updated: April 27, 2026
What we collect
Account info (name, email, billing address) and operational metadata about your environments and deploys. We log every MCP call (timestamp, tool name, response size) for billing and debugging — but never the contents of your code or your customers' data.
What we don't do
We never train on your code. We never share your code with third parties. Your Fargate tasks run in an isolated VPC with their own IAM role — your code never touches our control plane.
Data location
Customer data lives in AWS us-west-2. Postgres on Neon (us-east-1 for the control plane). We don't replicate to other regions without explicit configuration.
Subprocessors
AWS, Stripe, Neon, Resend, Sentry, PostHog. Full list and DPAs available on request.