Summary
Wyvid collects what's needed to run your account and generate your sitebuilds. We don't sell your data, and we don't use your designs or the generated output to train models. We use Google Firebase for our infrastructure and Anthropic's Claude API for generation.
What we collect
- Account information. Your email address, display name, and (if you sign in with Google) your Google account profile fields. We store the subscription tier you selected.
- Design inputs. Files you upload — screenshots, exports — and URLs you paste (Figma, Canva, etc.). These are stored in Firebase Storage under your user id.
- Generated output. The sitebuilds and WordPress themes Wyvid produces for you. Stored in Firebase Storage under your user id.
- Queue metadata. Task identifiers, timestamps, and worker status, stored in Firebase Realtime Database.
- Usage logs. Standard server logs — IP address, user agent, timestamps, requested URLs — used for security monitoring and to debug issues.
- Communications. If you email us, we keep the email so we can reply and for support history.
What we don't collect
- We don't run third-party advertising trackers.
- We don't use your designs or generated output to train any model.
- We don't read the contents of files you upload beyond what's needed to generate your sitebuild.
How we use what we collect
- To create and manage your account and subscription.
- To run your sitebuild generation jobs and store the results so you can preview and download them.
- To send you account-related emails (billing, security alerts, important changes).
- To debug and improve the Service.
- To detect and prevent abuse.
Third parties we share with
- Google (Firebase). Authentication, Firestore database, Realtime Database, Storage, Hosting. Subject to Google's Cloud terms.
- Anthropic. Our generation pipeline calls Anthropic's Claude API. Your designs and prompts are sent to Anthropic to produce the sitebuild output, governed by Anthropic's commercial terms (which include not using API content to train Anthropic's general-purpose models).
- Payment processor. When billing is enabled, payment data will be handled by a PCI-compliant processor (likely Stripe). Wyvid will not store your full card details.
Retention
- Design inputs. Kept while your account is active and for 30 days after deletion to allow account recovery, then permanently removed.
- Generated output. Same as inputs — yours to download as long as the account is active, deleted 30 days after account closure.
- Account information. Kept while your account is active; minimal records retained after closure if needed for tax or legal obligations.
- Server logs. Retained 90 days, then aggregated or deleted.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you. To exercise any of these rights, email hello@wyvid.com from the address on your account. We respond within 30 days.
You can delete your account at any time from your dashboard. Deletion removes your design inputs and generated output within 30 days; account-identifying records may be retained briefly for legal and tax compliance.
Cookies and local storage
Wyvid uses cookies and browser local storage only for authentication (keeping you signed in) and basic functionality. We don't use third-party analytics or advertising cookies. If that ever changes, we'll update this policy and provide a clear opt-in.
Security
Designs, generated output, and account data are protected by Firebase security rules that limit each piece of content to the user who owns it. We use HTTPS for all traffic, hash passwords with industry-standard algorithms (where applicable), and run on top of Google Cloud's infrastructure. No system is 100% secure — if we ever discover a breach affecting your data, we'll notify you within 72 hours and tell you what happened and what we're doing about it.
International transfers
Wyvid runs on Google Cloud. Your data may be processed in the United States or other regions where Google Cloud operates. Where required by law, we put appropriate transfer safeguards in place.
Children
Wyvid is not directed at children under 16. We don't knowingly collect personal information from children under 16; if we discover such data was provided, we delete it.
Changes to this policy
We may update this policy from time to time. If we make material changes, we'll notify you by email and post a notice in the dashboard at least 14 days before the changes take effect, except for changes required by law or for security.
Contact
Privacy questions? Email hello@wyvid.com.