Privacy Policy

Valmai (“we,” “us,” “our”) operates the website valmai.dev and related services. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

1.1 Information You Provide

• Account information: Email address, name, and password when you create an account
• Project information: Your project descriptions, onboarding answers, visual preferences, and any other input you provide during the build process
• Payment information: Processed by Stripe. We do not store your credit card number, CVV, or full card details on our servers. We receive a transaction ID and confirmation from Stripe.
• Communications: Any emails or messages you send to us

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, time spent on the platform, and interactions with the Service
• Device information: Browser type, operating system, and screen resolution
• Log data: IP address, access times, and referring URLs
• Cookies: We use essential cookies to maintain your session and keep you logged in. We do not use advertising or tracking cookies.

1.3 Information Generated During Builds

• Build logs: Records of the AI build process including cycle counts, error logs, and status updates
• Project files: The source code and assets generated for your project, stored on our servers until you download or delete them
• Quality scores: Internal scores assigned during the build review process
• Screenshots: Automated screenshots taken during quality assurance testing of your project

2. How We Use Your Information

We use your information to:

• Provide the Service: Process your project, run AI builds, deliver your application, and handle revisions
• Process payments: Charge for projects and manage billing through Stripe
• Improve our systems: Analyze build patterns, error rates, and quality metrics to improve the AI build process. This analysis uses aggregated, anonymized data. We do not use your specific project content to train AI models or share it with third parties.
• Communicate with you: Send build status notifications, delivery confirmations, and respond to your questions
• Prevent abuse: Detect and prevent fraudulent, malicious, or prohibited use of the Service
• Legal compliance: Comply with applicable laws, regulations, and legal processes

3. What We Do Not Do

• We do not sell your personal information to anyone
• We do not share your project source code, designs, or business logic with third parties
• We do not use your specific project content to train AI models
• We do not display advertisements on our platform
• We do not use advertising or tracking cookies
• We do not share your information with data brokers

4. Third-Party Services

We use the following third-party services to operate Valmai:

Each third-party service operates under its own privacy policy. We encourage you to review them.

5. Data Retention

• Account data: Retained as long as your account is active. Deleted upon account deletion request.
• Project files: Retained on our servers as long as your account is active. You can delete individual projects at any time. Upon account deletion, all project files are removed from active systems.
• Build logs: Retained for up to 12 months for operational and debugging purposes, then automatically deleted.
• Payment records: Retained as required by tax and financial regulations (typically 7 years for transaction records).
• System logs (IP addresses, access logs): Retained for up to 90 days, then automatically deleted.

6. Data Security

We implement reasonable security measures to protect your information:

• All data transmitted between your browser and our servers is encrypted via HTTPS/TLS
• Project builds run in isolated Docker containers with no access to other users’ data
• API keys and credentials are stored in encrypted environment variables, never exposed to users
• Database access is restricted and authenticated
• Stripe handles all sensitive payment data. We never see or store your full card number

While we take security seriously, no system is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights

7.1 Access and Download

You can access and download your project source code at any time through your Valmai dashboard.

7.2 Deletion

You can delete individual projects or your entire account at any time. Upon deletion:

• Your personal information is removed from active systems
• Your project files are permanently deleted
• Build logs associated with your account are queued for deletion
• Some data may persist in backups for up to 30 days before being permanently removed

7.3 Data Portability

Your project code is yours. You can download the complete source code at any time in a standard format (ZIP archive). No special export request is needed.

7.4 Correction

You can update your account information (email, name, password) at any time through your account settings.

7.5 Opt-Out of Communications

You can opt out of non-essential emails at any time. Build status notifications and security alerts cannot be opted out of while your account is active.

8. Children’s Privacy

Valmai is available to users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has created an account, we will promptly delete it and all associated data. If you believe a child under 13 is using our Service, please contact us at privacy@valmai.dev.

9. International Users

Valmai is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect and how we use it
• Right to delete your personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@valmai.dev.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice on our website at least 14 days before the changes take effect. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy.

12. Contact

For questions about this Privacy Policy or your data, contact us at:

Email: privacy@valmai.dev

For data deletion requests, email privacy@valmai.dev with the subject line “Data Deletion Request.”

This Privacy Policy was last updated in March 2026.