This Privacy Policy explains how ACE Software ("we," "us," "our," or "ACE") collects, uses, shares, and protects information in connection with the ACE desktop application (the "App"), the website at https://buildwithace.ai, and related services (collectively, the "Service"). By using the Service, you agree to this Policy.
This document is a template provided as scaffolding for a software product. It is not legal advice. You should have it reviewed by qualified legal counsel before publication.
1. Who We Are
ACE is a macOS desktop application that orchestrates multiple third-party AI coding agents (Claude by Anthropic, Codex by OpenAI, and Gemini by Google) in parallel to help you write code. The App runs locally on your machine and uses the AI provider tools and credentials that you have installed and configured. For privacy questions, contact privacy@buildwithace.ai (or support@buildwithace.ai).
2. Information We Collect
Account and identity information. When you sign in, we authenticate you using Google OAuth via Supabase. Through this process we receive basic profile information from Google, such as your name, email address, and a unique account identifier. We use this only to create and manage your account and to sign you in. We request the minimum scopes necessary to authenticate you, and we do not request access to your Gmail, Google Drive, contacts, or other Google services beyond basic sign-in profile information.
Purchase, subscription, and billing information. When you buy a plan, payments are processed by Stripe. Stripe collects and processes your payment details (such as card information) directly; we do not receive or store your full payment card numbers. We store billing metadata in Supabase, such as your plan, payment and access status, applicable billing period and renewal date, lifetime license, and Stripe customer, payment, checkout, or subscription identifiers, so we can manage your access and reconcile purchases.
Your code and prompts. When you use the App, the code, prompts, and instructions you choose to process ("Your Content") are sent from your machine to the third-party AI providers you have configured (such as Anthropic, OpenAI, or Google). This processing is governed by those providers' own terms and privacy policies. We do not require Your Content to be routed through our servers in order to call the AI providers; the App invokes the provider tools and credentials installed locally on your machine.
App and usage information. We may collect limited operational and diagnostic information, such as app version, basic device or operating-system information, feature usage, and error or crash logs, to operate, secure, and improve the Service. We aim to minimize this data and avoid collecting the contents of Your Content for this purpose.
Website information. If you allow browser analytics on https://buildwithace.ai, we use PostHog to collect website usage data such as pages viewed, referring site, campaign tags, browser and device information, clicks, scroll depth, performance data, and masked session replays. We remove sensitive URL parameters before capture. We do not intentionally record passwords, payment details, prompts, or code through browser analytics. See Section 7 for your choices.
Account and subscription measurement. We may send limited checkout and subscription lifecycle events to PostHog and sync account and billing records from Supabase and Stripe into PostHog's data warehouse. We use this information to measure conversion and revenue, reconcile subscription status, and improve billing operations. This processing does not enable browser session replay or browser analytics when you have declined them.
3. How We Use Information
We use the information we collect to:
- create, authenticate, and manage your account;
- provide, operate, and maintain the Service;
- process one-time purchases, subscriptions, billing, applicable renewals, and cancellations through Stripe;
- communicate with you about your account, transactions, security, and service updates;
- provide customer support and respond to your requests;
- monitor, secure, troubleshoot, and improve the Service; and
- comply with legal obligations and enforce our Terms.
We do not sell your personal information. We do not use the contents of your code or prompts to train our own models.
4. How Information Is Shared
We share information only as described here:
- Supabase (authentication and database): hosts our authentication and stores account, purchase, lifetime license, and subscription metadata.
- Stripe (payments): processes payments and manages subscriptions and billing.
- PostHog (analytics and data warehouse): helps us understand traffic sources, funnel conversion, page usage, heatmaps, and masked session replays when you consent to browser analytics, and helps us measure account, subscription, and revenue outcomes using billing records.
- AI providers you configure (Anthropic, OpenAI, Google, and any others you enable): receive Your Content (code and prompts) when you use the App, under their own terms and privacy policies. You are responsible for your relationship and compliance with these providers.
- Service providers that help us operate the Service (such as hosting, analytics, and error monitoring), bound by confidentiality and data-processing obligations.
- Legal and safety: when required by law, legal process, or to protect the rights, safety, and security of users, the public, or us.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
5. Data Retention
We retain account and subscription information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or de-identify your personal information within a reasonable period, except where we are required or permitted to retain it (for example, for tax, accounting, or legal-compliance purposes). Billing records held by Stripe are retained under Stripe's policies. Your Content sent to AI providers is retained according to those providers' policies, not ours.
6. Your Rights and Choices
Depending on your location, you may have rights to access, correct, update, port, restrict, or delete your personal information, to object to certain processing, and to withdraw consent. To exercise these rights, contact us at privacy@buildwithace.ai. We will respond as required by applicable law. You may also:
- manage or cancel your subscription through the Stripe customer billing portal;
- request deletion of your account and associated data by contacting support@buildwithace.ai;
- review and manage the AI provider accounts and credentials you have configured directly with each provider.
If you are in the EEA, UK, or a similar jurisdiction, you may have the right to lodge a complaint with your local data protection authority. For data-protection matters where applicable, contact privacy@buildwithace.ai.
7. Cookies and Analytics (Marketing Website)
Our marketing website at https://buildwithace.ai uses essential browser storage for site functionality and preferences. If you select "Allow analytics," PostHog uses browser storage and similar technologies to connect page views and events into a session, attribute visits to referring links and campaigns, generate heatmaps, and provide masked session replay. Form inputs are masked, authentication pages mask all page text in replay, and sensitive URL parameters are removed before capture. The desktop App is outside this website analytics scope.
Browser analytics is off until you grant consent. You may decline without losing core site functionality. You can withdraw consent by clearing the site's browser storage and revisiting the site, or by contacting privacy@buildwithace.ai. You can also use browser privacy controls, though those controls may affect other website functionality. This browser preference does not stop the account and subscription record processing described in Sections 2 and 4.
8. Children's Privacy
The Service is not directed to children, and it is not intended for anyone under the age of 16 (and in no case under 13). We do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact privacy@buildwithace.ai and we will take appropriate steps to delete it.
9. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information, including reliance on established providers such as Supabase and Stripe. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and your AI provider credentials secure on your own machine.
10. International Data Transfers
We and our service providers may process and store information in countries other than where you live. Where we transfer personal information across borders, we take steps to ensure appropriate safeguards are in place as required by applicable law.
11. Third-Party Services
The Service links to or integrates with third-party services (including the AI providers, Supabase, Stripe, and Google sign-in). This Policy does not cover those third parties' practices. We encourage you to review their privacy policies, including those of Anthropic, OpenAI, Google, Supabase, and Stripe.
12. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email or in-app or on-site notice) and update the effective date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
13. Contact Us
For questions or requests regarding this Policy or your personal information, contact us at privacy@buildwithace.ai or support@buildwithace.ai, or by mail at ACE Software, San Francisco, California, United States.