Privacy Policy

Last updated [PLACEHOLDER: effective date] · [PLACEHOLDER: legal entity name and registered address]

What we collect

Your account

Your email address and any name you give us, handled through our identity provider, along with which plan you're on and the organizations you belong to. Sign-in credentials live with that provider — we never see your password.

Billing

Your subscription status, billing period, invoices, and the record of your consent to auto-renewal. Payments run through Stripe as merchant of record: your card number never reaches our systems.

How hard your computer is working

Once a minute, each of your computers reports exactly three integers: the percentage of CPU it used, how much memory your processes are holding, and how much disk is in use. That's the whole sample. It carries no filenames, no file contents, no command history, and nothing about your visitors. We use it to run the meter, keep your plan honest, and spot machines in trouble — and because it's measured rather than assumed, it can only ever lower what we count against you.

The code that takes those samples is plain readable JavaScript on your own machine at /opt/platform/box-runtime/hostd-samples.js. Read it — we'd rather you did.

Operating the service

Records of things happening to your computers — created, started, stopped, reset, failed — plus the domains you connect and their certificate status. Our servers keep ordinary logs including IP addresses and timestamps, used for security, abuse investigation, and debugging.

When you contact us

Whatever you send us and our replies, kept so we can pick up where we left off.

What we deliberately don't collect

• The contents of your computer. Your files, your code, your databases, your environment variables. We don't index them, scan them, or train on them. Staff look only if you ask us for help, only as far as needed, or where we're legally compelled.
• Your Claude conversations. They happen between you and Anthropic under your own account. They pass through your computer, not our records.
• Your visitors. We run no analytics on the websites you host. Whatever you choose to add is yours to disclose.
• Anything for advertising. We don't do it.

Why we're allowed to hold it

Because we need it to give you the service you asked for, because we have a legitimate interest in keeping the platform secure and working, and because tax and accounting law requires us to keep billing records. Where we ever rely on consent, we ask for it plainly and you can withdraw it.

Who else touches it

A small number of infrastructure providers. They process data on our instructions, under contract, and none of them get to use it for their own purposes.

• Clerk — sign-in and identity.
• Neon — our application database.
• Vercel — hosting for the dashboard and marketing site.
• Fly.io — the computers themselves and their storage.
• Cloudflare — DNS, network tunnels, certificates, and edge routing for the websites you publish.
• Stripe — payments, as merchant of record, including tax handling and dispute resolution.
• [PLACEHOLDER: transactional email provider] — account and billing email.

Anthropic is not on this list, and that's deliberate: you connect your own Claude account, so they're your provider, not our subprocessor. Their privacy policy governs that relationship.

We'll also disclose data where the law genuinely requires it, and we'll tell you when we're permitted to. If the business is ever sold or merged, account data may transfer with it — you'd be told before anything changed.

How long we keep it

• While your account is open: account and usage data stay, including on computers that are dormant or on a downgraded plan. Canceling a plan doesn't delete anything.
• If you delete your account: your content and computers are purged after a short recovery window that protects you against a mistaken click.
• Billing records: invoices, tax records, and auto-renewal consent evidence are kept for about seven years, because tax and consumer-protection law requires it. This survives account deletion.
• Operational logs: kept for a short rolling window, then discarded.

Cookies

The dashboard sets the cookies needed to keep you signed in and to keep the app secure. This marketing site sets none, runs no third-party analytics, and has no advertising pixels on it.

Your rights

Wherever you live, you can ask us for a copy of what we hold, correct it, have it deleted, or object to how we're using it. Depending on where you are — the UK, EU, California, and a growing list of others — those are legal rights rather than courtesies, and they include complaining to your data-protection regulator.

We've never sold or shared personal information for advertising, and we don't intend to start.

Most of it you can do yourself: your files come down through the file browser any time, and account deletion is in your settings. For anything else, email privacy@iwantmywebsitenow.com and we'll respond within 30 days.

Where data lives

Our providers operate in the United States and elsewhere, so your data may be processed outside the country you live in. Where that involves personal data leaving the UK or EEA, it's covered by standard contractual clauses or another approved safeguard.

Security

Traffic is encrypted in transit, access to production systems is limited to the people who need it, and each customer's computer is isolated from every other. No system is perfect — if a breach ever affects your data, we'll tell you and the relevant regulator within the timeframes the law sets.

Children

iwantmywebsitenow isn't intended for children, and we don't knowingly collect data from anyone under 16. If you believe a child has given us data, write to us and we'll remove it.

Changes

If we change this policy in a way that matters, we'll email you before it takes effect rather than quietly editing the page. The date at the top always tells you when it last changed.

Contact

Privacy questions, data requests, or complaints: privacy@iwantmywebsitenow.com · [PLACEHOLDER: legal entity name and registered address].