Privacy Policy

What we collect

When you create a Wonton account, we collect your name, email address, and a bcrypt-hashed password. We never store your password in plain text.

• Name and email — to identify your account
• Password hash — never the raw password
• Billing information — processed directly by Stripe, not stored by us
• Site content — the pages and blocks you create inside Wonton
• Usage data — API call counts, generation runs (no browsing history)

How we use it

We use your data to run the service: authenticate you, deliver your content via the SDK API, process billing, and generate sites using AI.

We don't sell your data or use it for advertising. We don't share it with third parties except as described below.

Third-party services

• Stripe — handles payment processing. Your card details go directly to Stripe. We store only a Stripe customer ID.
• Anthropic API — used for AI site generation. We send your site description to Anthropic to generate content. Anthropic's data retention policies apply to those calls.
• AWS S3 — stores uploaded assets (images, files). Assets are stored in your configured bucket.

Data retention

We keep your account data as long as your account is active. If you close your account, we'll delete your personal data within 30 days. Site content and generated assets may be purged on a different schedule — contact us for specifics.

Your rights

You can:

• Request a copy of your data
• Ask us to delete your account and associated data
• Update your name or email from your account settings