Conquer
DRAFT · NOT YET IN FORCE · UPDATED 3 OCT 2026

Privacy Policy

This policy explains what personal data Conquer collects and why. The data controller is [COMPANY NAME], [ADDRESS]. Contact: [PRIVACY EMAIL].

1. Founders: people with a Conquer account

  • Account data: email, name, and the sign-in method you use (magic link or Google). Used to run your account. Legal basis: contract.
  • Project data: your prompts, chat messages, uploaded media, and the generated code and versions. Used to build and host your sites. Legal basis: contract.
  • Usage and billing: builds and edits, their cost, your plan, and your Stripe customer and subscription IDs. Card details are handled by Stripe and never reach Conquer. Legal basis: contract and legal obligations (tax records).
  • Connected Stripe account: only the account ID, so checkout on your site pays into your account.

2. Visitors to sites built with Conquer

For sites built with Conquer, the founder who owns the site is the controller of their visitors' data, and Conquer processes it on their behalf.

  • Analytics without cookies: page views, referrer, country (from the network, not stored as an IP address) and a visitor hash that changes every day, so a visitor can't be followed across days or sites. No cookies, nothing stored on the visitor's device.
  • Signups and forms: whatever the visitor enters (for example an email address), stored for the site's owner.
  • Payments: handled by Stripe on the owner's own Stripe account.

3. Who processes data for us

  • Supabase: database, sign-in and file storage (EU, Ireland).
  • Vercel: hosting of the Conquer app (EU region) [CONFIRM: function region].
  • Cloudflare: hosting of generated sites; site files in EU-jurisdiction storage.
  • Anthropic: the AI models that write sites and answer the Idea chat. Prompts and project files are sent to generate output [CONFIRM: region, data retention and transfer mechanism].
  • E2B: isolated sandboxes that build your site's code [CONFIRM: region and transfer mechanism].
  • Stripe: subscriptions and payments.
  • Resend: sign-in emails [CONFIRM once set up].
  • Google: only if you choose Google sign-in.

Where data leaves the EU, we rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. We don't sell personal data or use it for advertising.

4. How long we keep it

Account and project data are kept while your account exists and deleted when you delete it (backups roll off within [30] days). Billing records are kept as long as tax law requires [CONFIRM: 7 years].

5. Your rights

Under the GDPR you can access, correct, export or delete your data, object to or restrict processing, and complain to your data protection authority. Most of this you can do yourself in Account settings; for the rest, email [PRIVACY EMAIL]. Visitors to a site built with Conquer should contact that site's owner first.

6. Cookies on conquer.so

The Conquer app uses only cookies needed to keep you signed in. No tracking or advertising cookies.