Privacy policy

What we collect

Account information: your name, email address, and a hashed password when you sign up.

Project content: the prompts you send, files you attach, and the projects the AI builds for you.

Usage data: AI token usage (for credit accounting), and basic logs needed to operate the service.

Billing: payments are processed securely by Stripe. We never see or store your card details.

Integration keys you store in the Integrations vault are kept server-side, never displayed in full after saving, never sent to the AI model, and never embedded in your published pages.

How we use it

To provide the service: building your projects with AI, hosting your published sites, and metering credits.

Prompts and project content are sent to Anthropic's Claude API to generate your projects, subject to Anthropic's data policies. We do not sell your data or use it for advertising.

We send transactional email (e.g. a welcome email) via Resend. We don't send marketing email without your consent.

Published sites

Sites you publish are public at their URL. Don't include personal information in a published project that you don't want public.

Security & compliance

Security is built in, not bolted on. wish4 operates an information security program aligned to ISO/IEC 27001, with encryption in transit (TLS) and at rest, least-privilege access controls, and regular review of our systems and vendors.

We are GDPR compliant. You have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing — exercise any of these by contacting us. We process personal data only as needed to provide the service, and our sub-processors (e.g. Anthropic for AI, Stripe for payments, Resend for email) are bound by their own data-protection commitments.

Integration keys and secrets are stored server-side, encrypted, never shown in full after saving, never sent to the AI model, and never embedded in your published pages.

Data retention & deletion

Your projects and account data are retained while your account is active. To delete your account and all associated data, contact [email protected] and we'll process it promptly.

Contact

Questions about this policy: [email protected].