Privacy Policy

This policy explains how Cincha (“Cincha,” “we,” “us,” or “our”) handles information when you visit cincha.dev or use the Cincha service. Cincha provides hosted, AI-assisted applications and tools.

Information we collect

• Account information: your name, email address, profile image, account identifiers, verification status, and authentication records.
• Google sign-in information: when you choose Continue with Google, we request only openid, email, and profile. We use this information to authenticate you and create or link your Cincha account. Google sign-in does not give Cincha access to Google Drive, Docs, Sheets, Gmail, or other Google product data.
• Content and workspace data: prompts, messages, files, application configuration, connection metadata, generated output, and other material you submit or create through the service.
• Usage and transaction information: model usage, token and cost records, credit balances, purchases, and related billing records.
• Technical information: IP address, browser and device data, timestamps, request and security logs, diagnostics, and cookie or session identifiers needed to operate and protect the service.

How we use information

We use information to:

• create, authenticate, secure, and support accounts;
• provide workspaces, applications, AI model access, and requested output;
• process payments, credits, usage accounting, and fraud prevention;
• send verification, password-reset, security, and service messages;
• monitor reliability, investigate abuse, and improve the service; and
• comply with law and enforce our Terms of Service.

AI providers and submitted content

When you use an AI-powered Cincha application, relevant prompts, context, and files may be sent to the model provider selected for that application, such as OpenRouter and the model provider routed through it. Do not submit information you are not authorized to process. Provider handling is also governed by the applicable provider terms and privacy policy.

How we share information

We do not sell personal information. We disclose information only as needed to operate the service, complete your requests, protect users, or comply with law. Recipients may include infrastructure, authentication, transactional-email, payment, monitoring, and AI model providers. These may include Google, Resend, Hetzner, Stripe, OpenRouter, and model providers selected through OpenRouter. We may also disclose information in connection with a merger, financing, acquisition, or sale of assets, subject to appropriate protections.

Cookies and local storage

Cincha uses cookies and browser storage that are necessary for login security, OAuth transactions, session continuity, preferences, and fraud prevention. We do not currently use them for third-party behavioral advertising.

Retention and deletion

We retain information for as long as needed to provide the service, maintain security and audit records, resolve disputes, and satisfy legal obligations. Retention periods vary by data type. You may request deletion of your account and personal information by contacting us. We may retain limited records where required for security, financial, or legal purposes, and deletion from backups may occur on a delayed cycle.

Security

We use technical and organizational safeguards designed to protect information, including encrypted transport, restricted credential access, scoped execution, and authentication controls. No online system is completely secure, and we cannot guarantee absolute security.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. Contact us to make a request. You may disconnect Google sign-in from your Google account permissions page, although Cincha may retain the account records described above.

Children

Cincha is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Do not use the service if local law requires you to be older and you do not meet that requirement.

International processing

Cincha and its providers may process information in countries other than your own. Those countries may have different data-protection laws.

Changes to this policy

We may update this policy as the service changes. We will post the revised version here and update the effective date. Material changes may also be communicated through the service or by email.

Contact

Questions, privacy requests, and account-deletion requests can be sent to privacy@cincha.dev.