Privacy Policy

This Privacy Policy explains how Y Corp (“Y Corp”, “we”, “us”) collects, uses and shares information when you use Chatrun at chatrun.com, including our website builder, the sites you publish, and related services (together, the “Service”). By using the Service you agree to this policy. If you don't agree, please don't use the Service.

1. Information we collect

Account information. Your email address when you sign up with a one-time code. If you choose “Continue with Google”, we receive your email address, name and profile picture from Google.

Your content. The prompts and messages you type, images and files you upload, and the websites, code and text the Service generates for you. This includes the sites you publish.

Billing information. Payments are handled by Stripe. We never see or store your full card number. We keep your plan, Token balance and usage, and the Stripe customer and subscription identifiers needed to manage your subscription.

Domain information. If you connect a custom domain, the domain name and the results of our DNS and HTTPS checks.

Technical and usage data. Your IP address, browser and device type, pages and features used, and server logs. We use your IP address mainly to prevent abuse and enforce usage limits.

Local storage. We store a sign-in token in your browser's local storage so you stay logged in. We don't use advertising cookies or third-party ad trackers.

2. How we use information

• To provide the Service: generate, preview, edit, host and publish your websites, and connect your domains.
• To create and secure your account, sign you in, and send sign-in codes and service emails (such as receipts and important notices).
• To process payments, manage plans and Tokens, and prevent fraud.
• To monitor, debug, secure and improve the Service, and to enforce our Terms of Service and usage limits.
• To respond to your questions and support requests.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your prompts or generated sites to train our own AI models.

3. AI processing

To build and edit your site, we send your prompts, messages, uploaded files and relevant project content to our AI model provider (Anthropic), and we may fetch stock photos from Unsplash based on search terms derived from your site. These providers process your content only to return results to us, under their own commercial terms. If you include a website address in a prompt, we open that public page with an automated browser and send its text and screenshots to the same provider, so the AI can use it as a reference. Don't include sensitive personal information, passwords or confidential data in your prompts or sites unless you are comfortable with it being processed this way.

4. Published sites are public

When you publish a site, anyone on the internet can view it at its address (for example yourname.chatrun.com, or your own domain). Do not put anything on a published site that you don't want to be public. Unpublished projects are only visible to you while you are signed in.

5. How we share information

We share information only with service providers that help us run the Service, and in the limited cases below:

• Anthropic (AI generation) and Unsplash (stock photos).
• Stripe (payments and subscriptions).
• Google (optional sign-in).
• Resend (sending sign-in and service emails).
• Neon (database), Amazon Web Services (servers and DNS) and Vercel (website hosting).
• Let's Encrypt (HTTPS certificates; domain names appear in public certificate logs).
• Legal and safety: if required by law or to protect rights, safety and the security of the Service.
• Business transfers: as part of a merger, acquisition or sale of assets, with notice to you where required.

If you buy a domain from a registrar such as Namecheap, Porkbun or GoDaddy, that purchase is made directly with them and is governed by their terms and privacy policies, not ours.

6. Google user data

If you sign in with Google, we request only your basic profile: your email address, name and profile picture. We use it solely to create and identify your account and sign you in. We don't sell it, use it for advertising, or transfer it except as needed to provide the Service or as required by law. Chatrun's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data retention and deletion

We keep your account and project data for as long as your account is active. You can ask us to delete your account and associated content at any time by emailing support@chatrun.com. We will delete or anonymize your data within a reasonable period, except where we must keep some information for legal, tax, security or fraud-prevention reasons (for example, payment records). Backups are overwritten on a regular cycle.

8. Security

We use industry-standard measures, including encryption in transit (HTTPS) and access controls that keep each account's projects private to that account. No system is perfectly secure, so we can't guarantee absolute security. Please keep your sign-in codes private.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can download the code of your sites from the product at any time. To exercise any right, email support@chatrun.com. We will respond within the time required by law and may need to verify your identity. You also have the right to complain to your local data protection authority.

California residents: we don't sell or share personal information as those terms are defined in the CCPA, and we won't discriminate against you for exercising your rights. EEA/UK users: we process your data to perform our contract with you, for our legitimate interests (securing and improving the Service), to comply with the law, and, where needed, with your consent.

10. International transfers

We operate in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States and other countries where our providers operate, which may have different data protection laws than yours.

11. Children

The Service is not directed to children under 18, and we don't knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you by email or in the product. Continued use of the Service means you accept the updated policy.

13. Contact us

Y Corp, operator of Chatrun
Email: support@chatrun.com