Privacy Policy

1. Information we collect

We collect three categories of information:

• Account information. Email address, password hash, and (optionally) GitHub profile data when you sign in with GitHub.
• Usage and content. Prompts you submit, files generated by the AI agent, command logs, sandbox metadata, and project history.
• Technical data. IP address, user agent, device type, referrer, approximate location, and product analytics events such as page views and feature usage.

2. How we use information

• To operate, maintain, and secure the Service.
• To authenticate you, route requests, and run sandboxed code on your behalf.
• To improve product quality, debug issues, and prioritize new features.
• To communicate with you about your account, security, and product updates.
• To enforce our Terms and Conditions and comply with legal obligations.

3. Cookies and similar technologies

SprintBuild uses cookies and similar technologies for the following purposes:

• Strictly necessary. Authentication, session, security, and load balancing. These cookies are required for the Service to function and cannot be turned off in our systems.
• Preferences. Theme, language, and UI choices so the product remembers how you like it.
• Analytics. Aggregate usage data to understand which features are useful. Loaded only after you give consent via the cookie banner.

You can manage non-essential cookies via the consent banner shown on first visit. You can revisit your choice at any time by clearing the sb_cookie_consent cookie from your browser. Disabling strictly necessary cookies will break parts of the Service such as sign-in.

4. Third-party processors

We use carefully selected vendors to operate the Service. They process data on our behalf under contractual safeguards:

• Vercel— hosting, AI Gateway, and sandboxed code execution.
• Supabase — authentication, Postgres database, and file storage.
• GitHub — OAuth sign-in (only if you choose that option).
• Anthropic, OpenAI, xAI — large language model inference for AI features. Prompts and generated outputs are sent to whichever provider you select.

Each provider is bound by their own privacy policy and data processing terms. We do not sell your personal information.

5. Data retention

We retain account information for as long as your account is active. Project files, prompts, and logs are retained until you delete them or close your account. Aggregated, de-identified analytics may be retained longer. Backup copies are purged on a rolling 30-day cycle.

6. Your rights

Depending on where you live (e.g., EEA, UK, California, Brazil), you may have rights to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Email privacy@trendweaver.ai to exercise any of these rights. We will respond within the timeframe required by applicable law.

7. International transfers

SprintBuild is operated from the United States and our processors may store and process data in other countries. Where required, we rely on Standard Contractual Clauses or equivalent safeguards when transferring personal information across borders.

8. Security

We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, sandbox isolation for executed code, and least-privilege access controls. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

9. Children

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, email privacy@trendweaver.ai and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in-product or by email at least 7 days before the change takes effect. The “Last updated” date at the top reflects the current version.

11. Contact

Questions or privacy requests? Email privacy@trendweaver.ai.