Privacy Policy

1. Introduction

NoCodePro.AI (“we,” “us,” or “our”) is the controller of personal data processed through the NoCodePro.AI platform. This Privacy Policy explains what we collect, how we use it, and your rights. We comply with applicable data-protection laws, including the GDPR.

2. Information we collect

Information You Provide

• Account Information: name, email address, and profile details (authentication is handled by our provider, Clerk).
• Billing Information: billing details and payment method, processed securely by Stripe. We do not store full card numbers.
• Project & Prompt Data: applications, code, prompts, and content you create. Prompts and related inputs are sent to our AI providers (Anthropic, Google, and OpenAI) to generate output for you. These providers may process and retain that data under their own terms; using AI features requires this sharing. On paid plans, requests go through the providers’ paid services, which do not use your content to train their models. On the free Explorer plan, some requests run on Google’s free Gemini service, and Google may use content sent through that free service to improve its products, including to train its models — so do not put confidential or sensitive information into prompts on the free plan.
• Communications: messages you send to us or to other users.
• Google Play connection (optional): if you choose “Continue with Google” to connect Google Play, we receive permission from your Google account to upload the app builds you ask for to your own Google Play Console and to read their review status, plus your Google account email address to show which account is connected. We store that permission encrypted and use it only for those actions, when you ask. We never use it for advertising, never sell it, and never use it to train AI models. You can disconnect in Settings at any time, which also withdraws our access at Google, or remove it in your Google Account › Security › Third-party access. NoCodePro.AI’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information about visitors to sites you publish

If a site you publish with NoCodePro.AI has a form — a newsletter sign-up, a contact form or a booking request — and your plan saves form entries in NoCodePro.AI, we store what a visitor sends through it (for example a name, an email address or a message), with the page it was sent from and the time. We use it only to show it to you, to let you export and delete it, and to email you a daily summary if you turn that on. For this information you are the controller and we are your processor, under our Data Processing Agreement; you are responsible for telling your visitors how you use it. To stop abuse we check how often each visitor’s IP address submits in a short time window; we do not store the IP address with the entry. If you connect your own form service instead, entries go straight to that service and we do not store them.

Information Collected Automatically

• Usage Data: features used, actions taken, and AI-credit consumption;
• Device & Log Data: browser type, operating system, IP address, and access times;
• Cookies: see our Cookie Policy.

3. How we use information

We process personal data on the lawful bases of performance of our contract with you, our legitimate interests (operating and securing the Service), your consent (for optional analytics), and legal obligations. We use information to:

• Provide, maintain, and improve the Service, including generating AI output you request;
• Process payments, manage subscriptions, and meter AI credits;
• Send service, security, and support communications;
• Detect, prevent, and address fraud, abuse, and security issues;
• Comply with legal and tax obligations.

We do not use your private project content or prompts to train our own models, and we do not sell your personal data. What our AI providers may do with content sent on the free Explorer plan is described under “Project & Prompt Data” above.

4. Sharing and sub-processors

We share personal data only with sub-processors that help us run the Service, each bound by data-protection terms:

We may also disclose data where required by law, to protect our rights, or in connection with a merger or acquisition. A current list is maintained in our Data Processing Agreement.

We will give notice of material changes to our sub-processor list before they take effect; you may object on reasonable data-protection grounds, and continued use after notice constitutes acceptance.

5. Data retention

• Account & personal data: retained while your account is active and deleted within 30 days of account deletion (subject to the exceptions below).
• Project data: retained while active; on the free tier inactive projects may be paused and generated files purged after a period of inactivity; on paid plans a grace period applies after cancellation. You can export at any time.
• Legal/financial records: invoices, certain subscription records, and security/audit and login logs are anonymised and retained as required for tax, accounting, fraud-prevention, and legal-defence purposes (applicable statutory retention periods apply).
• Usage analytics: retained for up to 24 months.
• Form entries from your published sites: kept until you delete them. They are also deleted with the project they belong to, and with your account.

6. Data security

We implement appropriate technical and organisational measures, including encryption in transit (TLS) and at rest, access controls and authentication, least-privilege access, and incident-response procedures. No method of transmission or storage is 100% secure, but we work to protect your data. If we become aware of a personal-data breach affecting you, we will notify you without undue delay with the information reasonably available to help you protect yourself.

7. Your rights

Under the GDPR and similar data-protection laws you have rights to access, rectification, erasure, portability, restriction, and objection, and to withdraw consent. You can export or delete your data directly from your account settings, or contact us at privacy@nocodepro.ai. You also have the right to complain to your local data-protection authority.

California residents (CCPA/CPRA): we do not sell or share your personal information as those terms are defined under California law, and we do not use it for cross-context behavioural advertising — so no “Do Not Sell or Share” opt-out is required. You may exercise your rights to know, delete, correct, and port your data using the same tools and contact above, and we will never discriminate against you for doing so.

8. Cookies

We use a small number of essential cookies plus privacy-friendly analytics. For details and your choices, see our Cookie Policy.

9. Age requirement

The Service is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

10. International transfers

Some of our sub-processors are located outside your country or region (for example in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date and, for material changes, provide additional notice.

12. Contact us

For privacy questions or to exercise your rights, contact privacy@nocodepro.ai.