Privacy Policy

Who we are

The intentic platform (intentic.dev and the hosted workspace app) is operated by Artur Kurowski, established in Poland, acting as the data controller. Contact: contact@intentic.dev.

What we collect

The platform is deliberately minimal — it stores your identity and where your sandboxes are, nothing more:

• Account data — your name, email address, and avatar, received from Google when you sign in.
• Session data — a session token plus the IP address and browser user agent of each sign-in, kept for security. Expired sessions are purged automatically.
• Billing data — a Stripe customer is created for your account and subscription status is stored. Card details go directly to Stripe and never touch our servers.
• Sandbox records — sandbox names, their public URLs, and the connection tokens used to reach them.
• Teammate emails — email addresses you enter when sharing a sandbox, stored so the invitee's account can find it. Unaccepted invitations are purged after 90 days.

What we do not collect

We run no analytics, no advertising, and no tracking. The only cookie is the strictly necessary session cookie that keeps you signed in.

Your code, infrastructure, credentials for connected services (Cloudflare, GitHub, Forgejo, Anthropic), and everything your agent produces live in your sandbox on your own infrastructure — the platform never stores or reads them.

Your code and AI

The sandbox runs an AI coding agent powered by Anthropic Claude using your own Anthropic subscription or API key. When you use it, your prompts, workspace files, and command output are sent from your sandbox to Anthropic under your agreement with Anthropic — this traffic does not pass through the platform. Review Anthropic's terms and avoid keeping secrets in the workspace you would not want processed there.

Who we share data with

We share personal data only with the processors needed to run the service:

• Google — sign-in (Google Identity Services); the app also loads Google Fonts, which discloses your IP address to Google.
• Stripe — subscription billing and invoicing.
• Cloudflare — website hosting, DNS, and the tunnels that expose your sandbox.
• Anthropic — only via your own sandbox and credentials, as described above.

Legal bases and international transfers

We process account, sandbox, and billing data to perform our contract with you (GDPR Art. 6(1)(b)), and session/security data under our legitimate interest in keeping accounts safe (Art. 6(1)(f)).

Google, Stripe, Cloudflare, and Anthropic are US-based providers; transfers are covered by the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses under each provider's data processing agreement.

Retention

Account and sandbox data are kept until you delete your account, which removes them immediately. Expired sessions and stale invitations are purged automatically. Billing records are retained by Stripe and by us as long as statutory bookkeeping obligations require.

Your rights

You can access, correct, export, and erase your data at any time: Settings offers self-service data export and account deletion (which also removes your Stripe customer). You additionally have the rights to restriction, objection, and portability under the GDPR, and to lodge a complaint with the Polish supervisory authority (UODO, uodo.gov.pl) or your local data protection authority.

For anything else, write to contact@intentic.dev.

Changes

We will update this policy as the service evolves and change the effective date above. Material changes will be announced in the app.