Skip to main content

How We Handle Your Data

Transparency is a core value at Penguin Alley. Here's exactly what happens with your data β€” in plain language, no legal jargon.

Our Data Principles

Your Data Is Yours

The code we generate for you belongs to you. Your conversations, project files, and creative work are your property. We never claim ownership over what you build.

Full Transparency

We tell you exactly what we collect, why we collect it, and who has access. No hidden tracking, no surprise data sharing, no selling your information.

Delete Anytime

You can delete your account and all associated data at any time from your Settings page. We anonymize your profile and permanently remove your project data within 30 days.

Privacy by Design

Each project is isolated in its own workspace. No client can access another client's data. Our AI processes your data only to deliver your project β€” never for training models.

What We Collect & Why

We only collect data that is necessary to build, deploy, and maintain your projects.

Account Information

Your name and email address (or Google account if you use OAuth).

Why: To create your account, authenticate you, and communicate about your projects.

Conversations & Messages

Everything you write to our AI team, and everything they respond.

Why: To build your project according to your specifications. Your conversations are NOT used to train AI models.

Payment Information

Your subscription plan and billing history. Card details are handled entirely by Stripe.

Why: To process your subscription. We never see or store your credit card number.

Project Files & Code

All files, code, configurations, and assets generated for your project.

Why: To build, preview, deploy, and maintain your application. You own all generated code.

Usage Analytics

Features used, session length, and general interaction patterns (no keylogging, no screen recording).

Why: To improve the platform, identify bugs, and understand which features matter most.

AI & Your Data

Your conversations and project data are processed by Anthropic's Claude AI to deliver our service. This is how our AI team understands your requirements and builds your project.

Your data is NOT used to train AI models. Anthropic's API has a zero-retention policy for business API usage β€” your prompts and responses are not stored by Anthropic for training purposes.

Each project is completely isolated. Our AI cannot see other clients' projects, conversations, or data. When you delete a project, all associated AI context is permanently removed.

Our Service Providers

We work with trusted providers to deliver our service. Here's who they are and what they do.

ProviderPurpose
Anthropic (Claude)AI processing for conversations and code generation
StripePayment processing and subscription management
VercelApplication hosting and deployment
SupabaseAuthentication and primary database (US East region)
NeonProject database provisioning (US East region)
ResendTransactional email delivery
CloudflareDNS, security, and content delivery
GitHubCode repository sync (when enabled by user)

Frequently Asked Questions

Are my conversations used to train AI?

No. Your conversations are processed by Anthropic's Claude API to deliver our service, but they are never used for model training. Anthropic's business API has a zero-retention policy.

Who owns the code Penguin Alley generates?

You do. Once your subscription is active and payment is current, all custom code generated for your projects belongs to you. You can download it, push it to GitHub, or deploy it anywhere.

What happens when I delete my account?

We anonymize your profile, cancel your subscription, and permanently delete all your projects, conversations, files, and associated data within 30 days. Encrypted backups may persist for up to 90 days before being purged.

Can Penguin Alley staff see my projects?

Only authorized administrators can access project data, and only for support purposes (e.g., debugging an issue you reported). We never browse client projects without a specific support reason.

Do you track me with cookies or analytics?

We use only essential cookies for authentication and preferences (language, theme). We do not use tracking cookies, advertising pixels, or third-party analytics like Google Analytics.

Is my data transferred outside my country?

Our service providers are primarily based in the United States. Your data may be processed there. We ensure all providers maintain adequate security measures and comply with applicable data protection regulations.

For the full legal details, see our Privacy Policy and Terms of Service.