Draft for review. Not in effect. Bracketed items need filling in, and a lawyer should read it before it is published.

Privacy

Last updated [date]. [Company name], [address] (“we”) runs tesserai. Questions: [contact email].

What we keep, and why

• Your account: email address, and your name and picture if you sign in with Google or GitHub. To sign you in and show who did what.
• What you make: design systems, pages, versions, releases, comments, proposals, the changelog, and font files you upload. To keep and show them to you and to the people you share them with.
• AI requests: what you ask, the parts of your system the model needs to answer, and how many tokens each request used. To answer, and to keep to the monthly allowance and spending caps.
• Billing: your plan and subscription status. Card details go to our payment processor and never reach us.
• Errors and logs: error reports from your browser (the message and the page), and request logs (address, time, path). To fix problems and stop abuse. Logs are kept for [n] days.

Systems kept “in this browser” stay on your device and never reach us unless you save them to your account.

Cookies and storage

• A session cookie keeps you signed in.
• Your browser's storage keeps systems you haven't saved to an account, and recent settings.

We don't use advertising or tracking cookies.

Who processes it for us

• Cloudflare: hosting, the database and file storage, logs.
• Anthropic and Typesafe: the AI models that answer requests. [Confirm their terms: neither trains on API data by default.]
• Stripe: payments.
• Google and GitHub: signing in, if you choose them.
• [Email provider]: sign-in links.
• Google Fonts and Iconify: fonts shown in the preview and icon search, which receive the font or search term and your address.

Sharing

What you make is shared only with the people you share it with: team members, and anyone with a link you turn on. We don't sell personal information.

Keeping and deleting

We keep your account and what you make while the account is open. Deleting a system deletes it with its versions and comments. Deleting your account deletes everything in it within [n] days, apart from what we must keep for tax and accounting. Download everything in one file at any time from the Systems menu.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your information, or object to how it's used. Write to [contact email]. [Add region-specific sections as needed: GDPR (lawful bases, EU representative), UK GDPR, CCPA/CPRA.]

Children

tesserai isn't for children under [13/16].

Changes

If this changes in a way that matters, we'll tell you by email or in the app before it takes effect.