Privacy Policy
Last updated 17 September 2026
Draft. This document is pending review by our legal counsel and may change before launch.
Fulta Technologies Kft. ("Fulta") is the controller of the personal data described here. This policy covers the Fulta platform and this website. It does not cover applications that users build and publish with Fulta — those are controlled by the people who publish them.
What we collect
Account data. Your name, email address and password hash, plus verification and sign-in events.
Project data. The prompts you write, the source code generated for your projects, build logs, version history and the configuration of your apps. Secrets you store for an app are encrypted.
Billing data. Plan, subscription status, credit balances and transaction history. Card details are handled by Stripe and never reach our servers.
Usage data. Requests to the platform, build and deployment events, error reports, and aggregate metrics of your published apps (requests, CPU time, bandwidth, storage).
Website analytics. This marketing site uses a cookieless analytics tool that records page views without identifying individuals and without setting tracking cookies.
Why we use it
| Purpose | Legal basis |
|---|---|
| Providing the service you asked for | Performance of a contract |
| Billing, credits and fraud prevention | Contract and legitimate interests |
| Security, abuse prevention and debugging | Legitimate interests |
| Product analytics in aggregate | Legitimate interests |
| Service emails about your account | Contract |
| Marketing emails, where you opted in | Consent |
We do not sell personal data, and we do not use your project content to train our own models.
Who processes data for us
We use these processors, each under a data processing agreement:
- Cloudflare — build sandboxes, hosting of published apps, storage and CDN (EU and global edge).
- Stripe — payments and subscription billing.
- OpenAI and Anthropic — AI model providers that receive prompts and code in order to generate and review your app.
- A cloud hosting provider for the platform's own servers and databases.
- An email delivery provider for account and service email.
- A cookieless analytics provider for this website.
Some of these transfer data outside the EEA. Where they do, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
Account and project data are kept while your account exists. Deleted projects are torn down immediately and permanently removed after a short retention window kept for accidental-deletion recovery. Billing records are kept for as long as accounting law requires. Logs are kept for a limited period and then deleted.
Your rights
Under the GDPR you may request access to your data, correction, deletion, restriction, portability, and you may object to processing based on legitimate interests. You may withdraw consent at any time where we rely on it. Write to [email protected] and we will respond within one month.
If you are not satisfied, you can complain to the Hungarian supervisory authority (NAIH) or the authority where you live.
Security
Secrets are encrypted at rest and injected only at runtime — never written into your source code, build logs, browser bundles or prompt history. Builds run in isolated sandboxes with strict resource limits and restricted network access. The platform, previews and published applications are served from separate domains so that a generated app cannot access your platform session.
Changes
We will post updates here and, for material changes, notify you by email.
Contact
[email protected] · Fulta Technologies Kft., Váci út 1., 1062 Budapest, Hungary.