1. Introduction

Aceternity Solutions Pvt. Ltd. ("we," "us," or "our") operates Acebuilder ("Service"), including the Vercel Integration ("Integration"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service and Integration. By using Acebuilder, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

When you create an account and use our Service, we collect:

• Account Information: Name, email address, password (encrypted), profile picture
• Payment Information: Billing address, payment method details (processed securely by our payment processor)
• Project Content: Landing page designs, text content, images, code, and other materials you create or upload
• Communication Data: Messages you send to our support team, feedback, and survey responses

2.2 OAuth and Integration Data

When you connect your Vercel account via OAuth2, we collect and store:

• OAuth Access Tokens: Encrypted tokens that allow us to deploy on your behalf (we never see or store your Vercel password)
• Vercel Account Information: User ID, username, team memberships, and email address associated with your Vercel account
• Project Identifiers: Names and IDs of projects you deploy through Acebuilder
• Deployment Metadata: Deployment URLs, build status, timestamps, and configuration settings
• Deployment Logs: Build logs, error messages, and deployment status updates from Vercel

2.3 Automatically Collected Information

When you use our Service, we automatically collect:

• Usage Data: Features used, pages viewed, time spent, interactions, and navigation paths
• Device Information: Browser type and version, operating system, device type, screen resolution
• Log Data: IP address, access times, referring URLs, error logs, and API requests
• Cookies and Tracking: Session cookies, authentication tokens, preference settings (see Section 9 for cookie details)
• AI Interaction Data: Prompts, commands, and conversations with our AI assistant (used to improve AI responses)

2.4 Information from Third Parties

• Vercel API Responses: Deployment status, webhook notifications, project metadata
• Social Login Providers: If you sign in with Google/GitHub, we receive basic profile information (name, email, profile picture)
• Payment Processors: Transaction confirmations and payment status (we do not store full credit card numbers)

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Service Delivery

• Provide, maintain, and improve the Acebuilder Service
• Process and fulfill deployment requests to Vercel
• Authenticate your identity and manage your account
• Generate AI-powered landing pages and code
• Store and retrieve your projects and content

3.2 Communication

• Send deployment notifications and status updates
• Respond to support requests and inquiries
• Send important service announcements and security alerts
• Deliver optional promotional emails (you can unsubscribe anytime)

3.3 Analytics and Improvement

• Analyze usage patterns to improve features and user experience
• Train and refine AI models using anonymized data
• Identify and fix bugs, errors, and performance issues
• Conduct research and development for new features

3.4 Security and Compliance

• Detect and prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service and End User License Agreement
• Comply with legal obligations and regulatory requirements
• Protect the rights, property, and safety of our users and the public

3.5 Business Operations

• Process payments and manage subscriptions
• Generate invoices and financial records
• Conduct internal audits and quality assurance

4. Data Retention and Deletion

4.1 Retention Periods

We retain your information for as long as necessary to provide our Service and comply with legal obligations:

• Account Data: Retained while your account is active, plus 30 days after deletion
• Project Content: Retained while your account is active, or until you delete specific projects
• OAuth Tokens: Retained until you disconnect the Integration or delete your account
• Usage Logs: Retained for 90 days for security and debugging purposes
• Financial Records: Retained for 7 years to comply with tax and accounting laws
• Anonymized Analytics: Retained indefinitely for research and improvement

4.2 Data Deletion

You can request deletion of your data by:

• Deleting individual projects within your Acebuilder account
• Disconnecting the Vercel Integration (removes OAuth tokens immediately)
• Deleting your entire Acebuilder account from Settings
• Contacting us at [email protected] to request data deletion

5. Sharing and Disclosure

5.1 Third-Party Service Providers

We share your information with trusted third-party service providers who assist us in operating our Service:

• Vercel: We send deployment requests, project metadata, and OAuth tokens to deploy your projects
• Cloud Hosting: AWS/GCP for infrastructure, data storage, and content delivery
• Payment Processors: Stripe/PayPal for processing subscription payments
• Analytics Services: Google Analytics, PostHog for anonymized usage analytics
• Email Services: SendGrid, AWS SES for transactional and marketing emails
• Customer Support: Intercom, Zendesk for managing support tickets

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Government or regulatory requests
• Investigations of potential violations of our Terms of Service
• Protection of our rights, property, or safety, or that of our users or the public

5.3 Business Transfers

If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred. We will notify you via email and/or a prominent notice on our Service before your data is transferred and becomes subject to a different privacy policy.

5.4 What We Do NOT Share

6. Security Practices

We implement industry-standard security measures to protect your information:

6.1 Technical Safeguards

• Encryption: All data transmitted between you and our servers is encrypted using TLS 1.3
• OAuth Tokens: Stored encrypted in our database using AES-256 encryption
• Password Security: Passwords are hashed using bcrypt with salt rounds
• Access Controls: Role-based access controls limit employee access to user data
• Infrastructure Security: Firewalls, intrusion detection systems, and regular security audits
• Secure Development: Code reviews, penetration testing, and vulnerability scanning

6.2 Operational Safeguards

• Regular backups with encryption at rest
• Employee training on data privacy and security
• Incident response plan for data breaches
• Two-factor authentication (2FA) available for all accounts
• Automatic session expiration and logout

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

• Access: Request a copy of the personal information we hold about you
• Portability: Receive your data in a structured, machine-readable format (JSON/CSV)
• Export your projects and content directly from the Acebuilder dashboard

7.2 Correction and Deletion

• Correction: Update inaccurate or incomplete information in your account settings
• Deletion: Request deletion of your account and associated data (see Section 4.2)
• Delete individual projects, files, or content at any time

7.3 Opt-Out Rights

• Marketing Emails: Unsubscribe via the link in any promotional email
• Analytics Cookies: Opt out through your browser settings or cookie preferences
• OAuth Integration: Disconnect Vercel Integration to revoke OAuth access

7.4 Exercising Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected]
• Subject line: "Privacy Rights Request"
• Include: Your account email, specific request, and verification of identity

We will respond to verified requests within 30 days as required by applicable law.

8. International Data Transfers

Acebuilder is operated from India. If you are accessing our Service from outside India, please be aware that:

• Your information may be transferred to, stored, and processed in India and other countries
• These countries may have data protection laws different from your jurisdiction
• We use standard contractual clauses and other safeguards to protect your data during international transfers
• By using our Service, you consent to the transfer of your information to India and other countries as necessary to provide the Service

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we comply with GDPR requirements for international data transfers.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

9.1 Types of Cookies We Use

• Essential Cookies: Required for authentication, session management, and core functionality (cannot be disabled)
• Performance Cookies: Help us understand how you use our Service (Google Analytics, PostHog)
• Functional Cookies: Remember your preferences, theme settings, and language choices
• Advertising Cookies: We do not use third-party advertising cookies

9.2 Managing Cookies

You can control cookies through:

• Browser settings (most browsers allow you to block or delete cookies)
• Our cookie consent banner when you first visit Acebuilder
• Cookie preference center in your account settings

Note: Blocking essential cookies may prevent you from using certain features of our Service.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected information from a child under 18, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will notify you via email or prominent in-app notification
• We will provide at least 30 days' notice before material changes take effect
• We will archive previous versions of this policy for your reference

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Additional Resources

• End User License Agreement (EULA)
• Terms of Service