Privacy Policy

1. What We Collect

• Account info like email and name when you sign up.
• Chat messages and conversation history, so you can continue where you left off.
• Usage data like which features you use and how long you use them for billing and improvement.
• Technical logs like IP address, browser, and timestamps for security.
• Payment info is handled by our payment processor. We never see your card number.

2. What We Don't Do With Your Data

3. How AI Processing Works

Hammer Chat is the AI provider you interact with. When you send a message, we route it through our own infrastructure to third-party model providers (Anthropic, OpenAI, Google) solely to generate a response. These providers act as our sub-processors: they process messages transiently and are contractually prohibited from using your data to train their models. We never train models on your input ourselves.

4. Your Code

Your code lives in your isolated container. Only you can access it. When you delete it, it is gone.

5. How We Store Data

Containers are isolated at the kernel level with LXD. Data is encrypted in transit. Access to production systems is restricted to authorized operators only.

6. Sub-Processors

• Anthropic, OpenAI, Google — AI model inference (no training on your data).
• Google and GitHub — authentication. We receive email and name only.
• Cloudflare — content delivery and file storage.
• Netcup — server hosting (EU).
• Payment processor — billing and card data.

7. Cookies

• We use essential cookies for authentication, including a session token.
• We do not use tracking cookies.
• We do not use third-party analytics cookies.

8. Data Retention

• Account data is kept while your account exists.
• Chat history is kept until you delete it or delete your account.
• Code and projects are kept until you delete them or your container is removed.
• Logs are kept for 30 days.
• Billing records are kept for 7 years to meet legal requirements.
• Everything else is deleted within 30 days of account closure.

9. Your Rights — Self-Serve

You can exercise these rights yourself at any time:

• Export your data — Settings → Privacy & data → Export. You get a JSON file with your profile, chats, projects, and usage.
• Delete your account — Settings → Privacy & data → Delete account. This permanently removes your data.
• Correct your data — update your profile in Settings.

EU users can also lodge a complaint with their local supervisory authority. California residents: we do not sell your data, so no opt-out is needed.

10. Contact

Contact [email protected] for privacy questions.