Privacy Policy

Information we collect

• Account data — email, name, and authentication identifiers when you sign in. Sign-in supports email/password, a one-time email code, or optional Google/GitHub OAuth.
• Usage & billing — build credits, ShipGate runs, subscription tier, and metered task history for wallet enforcement.
• Project content — blueprints, canvas state, and verification artifacts you choose to store in cloud sync.
• Diagnostics — optional crash reports (Sentry) and product analytics (PostHog) when enabled; local IDE runs may stay offline without sending telemetry.

How we use data

We use collected information to operate the product, enforce credit-based metering, improve reliability, respond to support requests, and comply with legal obligations. We do not sell personal information.

Third-party services

We use subprocessors such as Stripe (payments), Google and GitHub (optional OAuth sign-in), Trigger.dev (background jobs), Resend (transactional email), PostHog (product analytics), Sentry (error monitoring), and cloud hosting providers (Netlify, Railway). Account authentication and sessions are handled in-house (no third-party identity provider). Each subprocessor processes data under its own policies and our data-processing agreements where applicable. See our security overview for the full subprocessor list and data-flow map.

Your choices

You may request access, correction, or deletion of account data by contacting support@wholestack.ai. Offline desktop usage without sign-in does not require an account; cloud AI features require authentication and debit your wallet meters per the pricing page.

CLI telemetry

Our command-line tools may collect anonymized usage telemetry only after explicit opt-in. You can disable it at any time, and we never collect your source code or prompts through telemetry.