Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

[Company Name SRL]
[Company Address]
Email: [email protected]

2. Information We Collect

We may collect the following categories of personal data:

Account Information

• name
• email address
• login credentials

Usage Data

• platform interactions
• generated projects
• prompts submitted to the AI system
• feature usage statistics

Technical Data

• IP address
• device type
• browser type
• operating system

Payment Information

Payments are processed by third-party providers (such as Stripe or app stores). We do not store full payment card details.

Companion and Apple device signing

Companion for Windows connects to your OpenV2 account to download authorized project builds. Its local installation workflow processes your Apple account identifier, authentication session, signing certificates and private keys, provisioning profiles, device identifiers, and installation status.

Apple authentication and device signing take place on your PC and communicate with Apple services. Your Apple password and verification code are entered in Companion and are not sent to OpenV2's cloud backend. Local signing material and sessions remain on the PC for subsequent installations. OpenV2 account tokens authorize build downloads; device and installation status are exposed to the OpenV2 browser through Companion's local connection.

App Store submission is a separate workflow and may process the Apple signing material and App Store Connect credentials you provide for publishing. Do not put passwords or signing secrets in project chat.

3. How We Use Your Data

We process personal data for the following purposes:

• providing and maintaining the Service
• managing user accounts
• processing subscriptions and payments
• improving platform performance
• detecting abuse and security threats
• complying with legal obligations

4. Legal Basis for Processing (GDPR)

We process personal data based on:

• contractual necessity (to provide the service)
• legitimate interests (service improvement, security)
• legal obligations
• user consent for optional analytics and marketing technologies, which stay off until you allow them in Privacy choices

5. Data Retention

We retain personal data only as long as necessary to:

• provide the Service
• comply with legal obligations
• resolve disputes

You can delete your account at any time in Settings → Profile → Delete account. This deletes your account, your projects with their chats, files and V2 Cloud backends, your generated assets and your credits, and cancels your subscription. Billing records that the law requires us or Stripe to keep (such as invoices) are kept for the period the law requires. You can also ask for deletion by email.

6. Data Sharing

The service uses the following third parties for the purposes described below:

• Cloudflare: website delivery, application hosting, storage, and security; this can include network metadata, requests, project files, and service logs.
• Supabase: OpenV2 account authentication, account records, saved projects, and uploaded assets.
• Neon: database and managed authentication services for apps using V2 Cloud.
• Limrun: cloud simulator and emulator sessions, native preview execution, and associated runtime data.
• OpenRouter and the AI providers serving the selected request: AI generation, editing, and in-app AI. Prompts, conversation context, relevant project code, and attachments may be transmitted to process a request. OpenV2 AI and V2 Cloud are our product brands; the processors supporting them can change.
• Stripe: checkout, subscriptions, payment processing, and billing records.
• Resend: sending service emails such as project invitations, credit notices and account notices; this includes the recipient address and the content of the email.
• Sentry, when configured: error and performance diagnostics, including technical event data. This is the same diagnostic service listed in our Cookie Policy.
• Apple: Apple account authentication, development signing, provisioning, device verification, and App Store Connect submission when you use those workflows.
• Third-party Anisette services: Companion requests Apple authentication support headers from a configured service pool. These services receive connection metadata such as your IP address; the header requests do not include your Apple password or verification code.

Data is transmitted as needed for the selected feature. The relevant provider terms and data protection arrangements apply; Apple also operates its own account and developer services.

We currently set no optional third-party analytics or marketing cookies. If introduced, those browser technologies remain off until you allow the relevant category in Privacy choices. Necessary service diagnostics are described separately in the inventory below.

7. Cookies and similar technologies

Necessary technologies run the account, keep the site secure, remember preferences, and complete a payment or support request you start. Analytics and Marketing stay off until you allow them. OpenV2 does not load third-party advertising pixels.

The choice is stored for one year in a first-party cookie and in local storage. After that year, or after you clear browser data, we ask again. A missing choice is treated as a denial, including when the browser sends Global Privacy Control. Choosing Accept all later replaces that default for this browser.

Privacy choices

Necessary

These cannot be switched off. They are required to provide the service you ask for.

Analytics

Helps OpenV2 understand product usage and website performance. Off until you allow Analytics. No analytics cookies are set today. If an analytics provider is added, it will load only after this choice is on, and this page will be updated.

Marketing

Measures how a visit arrived, including referrer and campaign parameters. Off until you allow Marketing. Turning it off removes those parameters from this browser and stops them being attached to signup. OpenV2 does not sell personal information and does not share it with advertising networks.

The categories above are the same inventory published in the Cookie Policy. Terms for using the service are in the Terms of Service.

8. International Transfers

If data is transferred outside the European Economic Area, we ensure appropriate safeguards such as:

• Standard Contractual Clauses
• GDPR-compliant processors

9. Your Rights (GDPR)

Users located in the European Union have the following rights:

• right to access personal data
• right to rectification
• right to erasure ("right to be forgotten")
• right to data portability
• right to restrict processing
• right to object to processing

You can delete your account yourself in Settings → Profile → Delete account. Other requests can be submitted via email.

10. Security

We implement technical and organizational measures to protect personal data from unauthorized access, loss, or misuse.

However, no system is completely secure.

11. Children's Privacy

The Service is not intended for children under 16 years old.

We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy periodically. Users will be notified of significant changes.

13. Contact

For privacy-related inquiries contact:

[Company Name SRL]
Email: [email protected]