Privacy Policy
Effective 2026-10-28
What we collect
Your email address, for your account and to log in. Your payment and billing history; your card number stays with Stripe, we only see its brand and last 4 digits.
Technical logs: IP addresses, times and actions on the service, your apps' logs, the audit log of actions taken by you or your AI. What you deploy (your code, data, encrypted secrets) is hosted for you; we use it for nothing but running the service, protecting it and complying with the law.
Why
To run the service, bill you, reach you (login, low balance, a failed deployment, material changes), protect the platform against abuse, and meet our legal obligations. No advertising, no selling data, no tracking: the only cookie is your session's.
Where and with whom
The launch starts in Toronto, Canada. Kansas City, United States, is planned but not yet available. Account data is in Canada.
Our processors: Stripe (payments), our email provider (sending links and notices). They receive only what their task needs. The AIs you connect receive what you allow them to see; their own policy applies on their side.
How long
The account, while it is open. Apps and their data are deleted when you delete them, close your account, or reach zero credits without the "Keep my content" add-on. Backups are kept 14 days. Technical logs, at most 12 months. Invoices, as long as tax law requires. Data tied to a report to the authorities, as long as the law requires.
Your rights
You can ask to access, correct, delete and port your information (exporting your apps is available at any time in the dashboard), and withdraw consent to optional emails in Settings.
Person in charge of the protection of personal information: Marc Gauthier, privacy@appcities.cloud.
If a confidentiality incident presents a risk of serious injury, we notify you and the Commission as the law requires.