Tietosuojaseloste

This Privacy Policy describes how Floras (operated by TMI Valtteri Savonen, “we”, “us”) handles information when you use floras.app and related services. Contact: valtteri@quickshops.app.

Information we collect

• Account data — email, name, and profile image (including from Google if you sign in with Google OAuth).
• Billing data — plan and subscription status via Autumn and its payment processor. We do not store full card numbers on Floras servers.
• BYOK API keys — if you use the BYOK plan, your Anthropic API key is stored encrypted at rest. We show only a short hint (last four characters). Plaintext keys are not returned to the browser after save.
• Project content — prompts, chat messages, site plans, and generated site files in sandboxes.
• Published sites — on Pro, published site metadata and hosting configuration for floras.app / custom domains.

How we use information

• Provide generation, preview, export, billing, and support.
• Run AI generation with either Floras’ Anthropic account (Pro) or your Anthropic key (BYOK).
• Host published Pro sites and manage DNS/domain records.
• Secure the service, prevent abuse, and improve reliability.

Third parties

We rely on processors to run Floras, including:

• Convex (database and auth)
• Anthropic (AI models — platform or your BYOK key)
• Blaxel sandboxes (live preview VMs)
• Cloudflare (Pages hosting and DNS for published sites)
• Autumn (billing and subscriptions)
• Google (if you use Google sign-in)

Their processing is governed by their own terms and privacy policies.

Retention

We keep account and project data while your account is active. You may request deletion by contacting us. Encrypted BYOK keys are removed when you delete the key or when we delete your account.

Security

We use encryption in transit (HTTPS) and encrypt BYOK API keys at rest. No method of transmission or storage is perfectly secure.

Your choices

• Update profile and instructions in Account settings.
• Add, replace, or remove your Anthropic key on BYOK.
• Manage billing via the customer portal.
• Contact us to request account deletion.

Changes

We may update this policy. The “Last updated” date above reflects the latest revision. Continued use after changes means you accept the updated policy.