1. Introduction

Welcome to Eitherway ("we," "our," or "us"), operated by Eitherway AI Inc. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered application development platform, including our website, web application, and Figma plugin (collectively, the "Service").

By using Eitherway, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Email address
Display name
Profile information (bio, location, website link)
Profile avatar image
Wallet addresses (if you connect a cryptocurrency wallet)
OAuth account information (if you sign in via Google)

2.2 Code and Project Data

When you use our platform to build applications, we collect and store:

Chat messages and prompts you send to our AI
Generated code and file contents
File version history and snapshots
Project metadata (framework, dependencies, routes)
Session data and conversation history

2.3 Figma Plugin Data

When you use our Figma plugin to export designs, we collect:

Frame images and screenshots
SVG and image assets
Design tokens (colors, typography, effects)
Node structure and hierarchy information
Generated HTML from designs

Data Retention: Figma design exports are associated with a claim code that expires after 1 hour. After expiration, unclaimed designs may be automatically deleted. Claimed designs remain associated with your account and session.

2.4 Brand Kit Data

If you create a brand kit, we store:

Logo and image files
Color palettes and extracted colors
Brand asset metadata

2.5 Payment Information

When you make purchases, we collect:

Transaction history and credit balance
Subscription status and plan details
Payment method type (card or cryptocurrency)

Note: We do not store full credit card numbers. Card payments are processed securely by Stripe. Cryptocurrency payments are processed by NOWPayments. We only store transaction references and payment status.

2.6 Referral and Commission Data

If you participate in our referral program, we track:

Your referral code and share links
Referral relationships (who referred whom)
Commission earnings and payout history
Payout method preferences

2.7 Deployment and Integration Data

When you deploy or connect external services, we store:

Deployment history and logs
Connected service credentials (encrypted)
Integration tokens for GitHub, Netlify, Vercel, Supabase, etc.
API keys for AI providers (encrypted)

2.8 Usage and Analytics Data

We automatically collect:

Feature usage patterns and event logs
Session activity and timestamps
Device fingerprint (for fraud prevention)
Error logs and performance metrics

3. How We Use Your Information

We use the collected information for:

Service Delivery: To provide AI-powered code generation, process your prompts, and deliver generated applications
Account Management: To create and manage your account, authenticate your identity, and maintain your session
Payment Processing: To process purchases, manage subscriptions, and handle refunds
Referral Program: To track referrals, calculate commissions, and process payouts
Service Improvement: To analyze usage patterns, fix bugs, and improve our platform
Security: To detect fraud, prevent abuse, and protect our users
Communication: To send important updates, respond to inquiries, and provide support
Legal Compliance: To comply with applicable laws and regulations

4. AI Processing and Third-Party Services

Our Service uses AI models to generate code and analyze designs. When you interact with our AI features:

Your prompts and messages are sent to AI providers (primarily Anthropic/Claude) for processing
Figma designs may be analyzed using AI vision capabilities
Generated code is created based on your inputs and stored in your account

We use the following third-party services:

Anthropic (Claude): AI model provider for code generation and design analysis
Stripe: Payment processing for card transactions
NOWPayments: Cryptocurrency payment processing
Privy: Authentication and wallet connection
Supabase: Database and backend services (when you enable Eitherway Cloud)

Each third-party service has its own privacy policy governing their use of data. We encourage you to review their policies.

AI Disclaimer: Code and applications generated by our AI are provided "as is" and do not constitute professional software engineering, legal, financial, or security advice. You are responsible for reviewing, testing, and validating all generated code before deployment. We make no warranties regarding the accuracy, completeness, or fitness for any particular purpose of AI-generated content.

5. Data Retention

We retain your data according to the following guidelines:

Account Data: Retained while your account is active and for a reasonable period after account closure
Code and Sessions: Retained while your account is active; you can delete individual sessions anytime
Figma Exports: Unclaimed exports (claim codes) expire after 1 hour; claimed data is retained with your session
Payment Records: Retained as required by applicable financial regulations
Security Logs: Retained for security monitoring and debugging purposes

6. Data Security

We implement security measures to protect your information:

Encryption in Transit: All data transmission uses HTTPS/TLS encryption
Encryption at Rest: Sensitive data (API keys, tokens, credentials) is encrypted using AES-256-GCM
Access Controls: Row-level security policies control access to your data
Security Logging: Security events are logged for monitoring and incident response
Secret Protection: Sensitive values are automatically redacted from logs
Rate Limiting: Request limits protect against abuse

While we strive to protect your data using commercially reasonable measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights:

Access: Request information about the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your data, subject to legal retention requirements
Objection: Object to certain processing activities
Withdrawal: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at inquiries@eitherway.ai. We will respond to your request in accordance with applicable law.

8. Cookies and Tracking

We use essential cookies and local storage for:

Authentication and session management
User preferences and settings
Security (CSRF protection)

8.1 Analytics

With your consent, we use the following analytics services to understand how users interact with our platform:

Mixpanel: Product analytics to track feature usage, user journeys, and improve our service
Google Analytics 4 (GA4): Web analytics to measure traffic, engagement, and performance

These services may use cookies and similar technologies to collect information about your use of our Service. You can manage your cookie preferences through the cookie consent banner shown when you first visit our site. If you decline analytics cookies, these services will not be loaded.

We do not use third-party advertising cookies or sell your data to advertisers.

9. Age Requirements

Our Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at inquiries@eitherway.ai.

10. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

By using our Service, you acknowledge and consent to such international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Privacy Inquiries: inquiries@eitherway.ai
General Support: support@eitherway.ai

Eitherway AI Inc