What we collect
- Your email — when you join our newsletter or sign in to the app.
- Your name — if you connect a Google account on sign-in.
- The journey decisions you save — your business name, brand brief, generated site, and the AI’s running memo of your work. Everything you intentionally save in the app.
- Standard server logs — IP address, user agent, and timestamps for security and abuse-prevention purposes. Auto-deleted after 30 days.
We do not collect your chat transcripts (those live in your browser only), payment-card data (Stripe handles that), or anything we don’t explicitly list above.
What we do with it
- Run the app — save your decisions, render your dashboard, generate your site, send transactional emails (sign-in links, billing receipts).
- Send newsletter emails — only if you signed up for those.
- Improve the product — aggregate, de-identified usage patterns. We never use the content of your journey artifacts to train AI models.
Who we share it with
Only the service providers we need to actually run the product. Each has its own privacy policy:
- Vercel — hosting + AI gateway + domain registration.
- Neon — Postgres database where your journey artifacts live.
- Anthropic + Google — LLM providers behind the AI chat and site generation. Your prompts are sent to them per turn; Anthropic and Google both contractually agree not to train models on API inputs.
- Buttondown — newsletter sending (only if you signed up for the newsletter).
- Stripe — payments and subscription billing. Card data never touches our servers.
- Better Auth + Google OAuth — sign-in.
We do not sell your data to anyone. We do not run ad networks. We have no incentive to share data beyond what’s required to run the product.
Your rights
- Unsubscribe from the newsletter — every email has an unsubscribe link.
- Delete your account — email us and we’ll wipe everything within 7 days.
- Export your data — email us; we’ll send back a JSON dump of your journey artifacts.
- Ask what we have on you — same path; we’ll send back the lot.
If you’re in the EU, the UK, or California, you have these rights under GDPR, UK-GDPR, and CCPA respectively. They apply equally to everyone else as a matter of policy.
Domain ownership
If you register a domain through Stoke, the domain is registered in your name, not ours. You own it from day one. If you ever cancel, we’ll send you the transfer auth code so you can move it to any registrar you like. We won’t hold your domain hostage.
Children
Stoke isn’t for kids under 13. We don’t knowingly collect data from anyone under 13. If we find out we have, we delete it.
Changes to this policy
If we meaningfully change what we collect or how we use it, we’ll email everyone with an account before the change takes effect. Cosmetic edits, we just update this page.
Get in touch
Email hello@stokeit.io with any questions or requests. Plain English wins; you don’t need to write a formal letter.