Privacy Policy

We collect only what we need to run NinjaAi:

• Account details: your email address and name. If you sign in with Google or GitHub, we also receive the profile picture and email address that provider shares with us. We never receive your Google or GitHub password.
• Your projects: the prompts and messages you write, the websites and code NinjaAi generates for you, the images you upload, and the version history of each project.
• Connections you choose to make: if you connect GitHub or publish a site, we store what is needed to sync your code or deploy it.
• Technical data: your IP address, browser type and request logs, used to keep the service secure, apply rate limits and fix problems.

We use your information:

• To create your account, sign you in and keep you signed in.
• To generate, preview, refine, version and publish your websites.
• To send you the emails the service needs, such as sign-in links and account notices.
• To protect the service against abuse and to diagnose errors.
• To meet our legal obligations.

We do not sell your personal information.

To build and refine your site, we send your prompts and the relevant project content to the AI model providers we use. Those providers process the content to return a result. Their handling of that content is governed by their own terms and privacy policies, so avoid putting secrets or personal data about other people into your prompts.

We share data only with service providers that help us run NinjaAi, and only as needed for that purpose:

• AI model providers, to generate your websites.
• Hosting and deployment providers, to store your projects and publish your sites.
• Image storage providers, to store images you upload.
• An email delivery provider, to send sign-in and account emails.
• GitHub, only if you connect your repository.

When you publish a site, its content becomes publicly reachable at its address. Anything you include in a published site can be seen by anyone who visits it.

We use a session cookie and your browser storage to keep you signed in and to remember your preferences, such as light or dark mode. We do not use them for advertising.

We keep your account and projects while your account is active. When you delete a project or ask us to delete your account, we remove the associated content, except where we must keep some records for legal or security reasons. Backups and logs are removed on a rolling schedule.

Sign-in links and codes are single-use and short-lived, and we store them only in hashed form. No system is perfectly secure, so we cannot guarantee absolute security.

You can access, correct, export or delete your information, and you can ask us to stop processing it in certain cases. Depending on where you live, you may have additional rights under local law, including the right to complain to your data protection authority.

NinjaAi is not intended for children under 16, and we do not knowingly collect their information.

Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for those transfers.

We may update this policy from time to time. We will change the date above and, for significant changes, tell you in the product or by email.