SpecStudio

• Account: your email address and a hashed password, or, if you sign in with Google, the email, name and profile picture Google shares. Nothing else from your Google account is requested.
• Your saved work: task specifications, prompt templates, Markdown documents, spec jobs and their version history. You create it; you can edit, export or delete it.
• Per-request usage analytics: each time the app runs a server action for you, we record your user id, the action's name, whether it succeeded, how long it took and when. We do not record the content you submitted in these events. We use them to understand which tools are used, find errors and prevent abuse.
• Page analytics: a self-hosted instance of Umami counts page views, referrers, browser, device type and country. Umami does not use cookies and does not identify you.
• Payments: if you subscribe to Utilities Pro, Dodo Payments processes the payment as merchant of record. We receive your email, plan, subscription status and renewal dates, never your card details.

When you use an AI feature, the text you submit is sent to an AI model provider to produce the result: Anthropic (Claude, the default model), OpenRouter (Mistral models, processed in the EU, also used automatically as the fallback; Xiaomi and Zhipu models, processed in China, only when you pick one), DeepSeek (processed in China; only when you pick it) and Cerebras (only when enabled). Depending on the feature, either the model you choose or the first available provider processes it. These providers process the text under their API terms; we do not ask them to train on it, and we send no account details with it. Do not submit secrets or personal data you do not want processed this way.

• DevSpeak Labs Cloud hosts the database, sign-in service and analytics hub.
• Our web hosting provider serves the web application.
• Resend delivers account emails (confirmation, password reset, security notices).
• Google provides "Sign in with Google", if you choose it.
• Dodo Payments handles subscriptions and invoices.
• Context.dev and Firecrawl: fetch the public web page you ask Live page grounding to read (src/lib/context.server.ts).
• Browserbase: run a cloud browser session when you validate a spec against a live site (src/lib/spec-validation.functions.ts).
• Klavis: connect the MCP tools you enable in the studio (src/lib/mcp-tools.functions.ts).

We do not sell your data and we do not use it for advertising.

Your account and saved work are kept until you delete them or ask us to delete your account. Usage events are kept for product analytics and may be retained in aggregate after an account is deleted. Payment records are kept as long as tax law requires.

You can access, correct, export or delete your data, and object to its processing. Email juanamillo@proton.me and we will respond within 30 days.

We will update the date above when this policy changes, and email account holders about material changes.