Privacy policy
Last updated 4 November 2026
This policy explains what Big Kitty Labs collects when you use Proty, why, who we share it with and the choices you have. We collect what we need to run the service and nothing for advertising.
1. What we collect
Account details: your name, email address, password (stored only as a hash), two-factor settings and, if you sign in with Google or GitHub, the basic profile those services share.
Workspace content: briefs, uploads, generated documents, wireframes, prototypes, studio chat and settings such as a model key (encrypted at rest) or a house design standard.
Billing details: your plan, subscription status and invoices. Card details are handled by Stripe; we never see or store full card numbers.
Usage and security data: generation counts and tokens per workspace, sign-in sessions with IP address and browser, an audit log of workspace changes, and anonymous view counts on share links.
2. How we use it
To run Proty: sign you in, generate and store your work, meter plan usage, bill subscriptions, send the emails the service needs (confirmations, resets, invitations, receipts, usage alerts) and keep accounts secure.
To support you when you ask, and to understand overall usage so we can improve the product. We don't sell your data and we don't use your content to train AI models.
3. Who we share it with
Service providers who process data for us under contract: Vercel (hosting), Neon (database), Amazon Web Services Bedrock and, where configured, OpenRouter (AI models that generate your outputs), Stripe (payments) and Resend (email).
If your workspace brings its own model key, your content is sent to that provider under its terms. Anyone you give a share link to can see that prototype. We may disclose information if the law requires it.
4. Where it's stored and for how long
Data is stored in the United States. We keep account and workspace data while the account or workspace exists. Deleting a prototype, workspace or account removes its content from the live database; backups roll off within 30 days.
Billing records are kept as long as tax law requires. Audit events are kept for the life of the workspace.
5. Cookies
We use cookies that are needed for the service: your sign-in session, a trusted-device cookie if you choose it at two-factor sign-in, your sidebar preference and an anonymous visitor ID that counts unique views of share links. We don't use advertising or cross-site tracking cookies.
6. Your choices and rights
You can update your name and email, turn optional emails off, export your work and delete your account from settings. Depending on where you live, you may have rights to access, correct, delete or port your data, or object to processing. Write to support@proty.app and we'll respond within 30 days.
7. Security
Data is encrypted in transit and model keys are encrypted at rest. Accounts support two-factor sign-in, sessions can be revoked, and sign-in attempts are rate limited. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you promptly.
8. Changes and contact
We'll post changes here and email workspace owners about significant ones. Questions or requests: support@proty.app.