This policy describes what data Tamagui LLC ("we", "us") collects when you use SootSim and sootbean.com, what we do with it, and what we never do with it.

The short version

• We do not sell your personal data.
• We do not use your code, prompts, uploaded content, or any data flowing through SootSim to train AI models.
• We only share data with the sub-processors listed below, each for a specific purpose.
• You can export or delete your account data by emailing us.

What we collect

Account data

When you sign up we collect your email address and the authentication details from your login provider (GitHub, Google, or email). We store your account identifier, email, and display name.

Usage data

We collect operational metrics needed to run the service: preview uploads, API key usage, AI token spend, and aggregate counts used for billing and spending caps. We do not use this data for advertising.

Uploaded content

When you push a preview, we store the bundled application, captured assets, and flow videos you produce. Personal and trial uploads do not auto-expire. Team previews are stored for 30 days and Team flow videos for 7 days. We do not scan, index, or read the contents of your uploads beyond what's required to serve them.

Prompts and AI usage

When you run agent flows, the prompts, diffs, and tool results you generate pass through Anthropic's API to produce responses. We log metadata (token counts, model used, spend) for billing and support. We do not use your prompts or responses to train AI models. Anthropic does not train on our API traffic under the terms of our business agreement with them.

Website analytics

We use minimal first-party analytics to understand which pages work and which don't. No third-party ad networks, no cross-site tracking pixels.

Sub-processors

The following companies receive portions of your data to provide specific parts of the service. Each is bound by a data-processing agreement limiting what they can do with that data.

• Stripe — payment processing. Receives your billing email, card details (handled directly by Stripe, never seen by us), and billing address for tax calculation.
• Anthropic — AI model execution. Receives prompts and tool results for agent flows. Does not train on our traffic.
• Cloudflare R2 — object storage. Stores uploaded preview bundles, captured assets, and flow videos.
• Postmark — transactional email. Receives your email address to deliver sign-in links, billing receipts, and spending-cap alerts.
• GitHub — if you use GitHub OAuth or connect an org for CI, receives the standard OAuth scopes required. We never ask for repo write access we don't need.

How long we keep data

• Account records: for the life of the account.
• Personal and trial uploads: until you delete them or exceed the retained-preview cap.
• Team preview uploads: 30 days.
• Team flow videos: 7 days.
• Billing records: as required by tax and accounting law (7 years in most jurisdictions).
• Logs: 30 days rolling.

Your rights

You can export a copy of your account data, correct inaccurate information, or delete your account and associated data by emailing support@sootbean.com. We respond within a reasonable time frame, and always within 30 days.

If you're in the EU/UK, GDPR rights apply. If you're in California, CCPA rights apply. In both cases the mechanism is the same — email support@sootbean.com.

Security

Data in transit is encrypted with TLS. Uploaded content is stored in Cloudflare R2 with per-object access controls. We follow the principle of least privilege for internal access and rotate credentials routinely.

Children

SootSim is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes

Material changes to this policy will be announced by email to active subscribers and posted on this page before they take effect.

Contact

Questions about this policy — or a request to exercise any of the rights described above — should go to support@sootbean.com.