What we collect
- Account data. Email + display name + role in your workspace. Required to sign in.
- Workspace content. Projects, files you upload, files indexed via n8n, and Markdown sessions you visualize. These live in your Supabase project and your Google Drive — we do not move them elsewhere.
- Usage events. Audit log rows for every meaningful action (project created, member invited, file indexed). Used to power the Activity feed and to debug issues.
- Cookies. Supabase sets an HTTP-only auth cookie. We use
localStoragefor language preference and the active workspace. No third-party analytics on the marketing site.
What we never collect
- Microphone, camera, or location.
- Cross-site identifiers.
- Payment card numbers — Stripe handles those entirely; we only see the customer ID.
How we use it
- To run the product: render your dashboard, send invitations, answer Knowledge chat queries via RAG.
- To bill you (Workspace + Enterprise plans, via Stripe).
- To support you when you write to hello@yourstart.dev.
Third parties we share data with
- Supabase — primary database + auth.
- Vercel — hosting and edge functions.
- OpenAI / Anthropic / Voyage — embedding + LLM providers used by
/api/embed,/api/search,/api/chat. Only the text snippet you submit is sent. - Google Drive — file storage when you connect your workspace.
- Stripe — payments (paid tiers only).
How long we keep it
Active workspaces — indefinitely. Deleted workspaces — purged within 30 days. You can request earlier deletion at any time.
How to delete your data
Email hello@yourstart.dev from your account email with the subject “delete”. We will confirm and purge within 7 business days. Workspace admins can also delete a workspace directly from Settings → Danger zone (rolling out).
Where we are
DoNTech operates from Bangkok, Thailand. Disputes are governed by Thai law unless a stricter applicable consumer-protection regime applies to you.
Contact
Privacy questions: hello@yourstart.dev. We answer within two business days.