4rth AI Privacy Policy
Last updated: October 9, 2026 · Version: 1.0
This Privacy Policy explains how 4rth AI, Inc. ("4rth", "we", "us"), 4 Palo Alto Square, 3000 El Camino Real, Suite 200, Palo Alto, CA 94306, USA, collects, uses and shares personal data when you use the 4rth website, app builder, AI features and hosting (the "Service"). It works together with our Terms of Service. For personal data of people who use the apps you publish ("End Users"), you are the controller and we process it for you under our Data Processing Addendum; see section 9.
1. Information we collect
- Account information: your name, email address and profile picture, including what Google shares with us if you sign in with Google.
- Your Content: prompts, instructions, files, code and data you submit to build or run apps, the data stored in your apps, and the output generated for you.
- Payment information: payments are processed by Stripe. We receive the billing email, country, card brand, the last four digits of the card, and transaction details. We do not receive or store full card numbers.
- Credits and purchases: credits granted, bought and used, and which app used them, for building and for running.
- Usage and device information: pages viewed, clicks, features used, IP address, approximate location, browser, device type, and recordings of on-screen sessions (PostHog), used to find problems and improve the Service.
- Advertising information: if you arrive from one of our ads, the ad click identifier and actions such as signing up, creating an app or buying credits.
- Communications: messages you send to support, feedback, and survey answers.
2. How we use it
| Purpose | Legal basis (EEA and UK) |
|---|---|
| Provide the Service: build, host and run your apps, keep you signed in | Performance of our contract with you |
| Process purchases, add and track credits, send receipts and low-credit emails | Performance of our contract |
| Keep the Service secure, prevent fraud and abuse, and enforce our Terms | Legitimate interests; legal obligations |
| Understand how the Service is used and improve it | Legitimate interests |
| Develop and train AI models using de-identified, aggregated data only (section 3) | Legitimate interests |
| Send product news and offers | Consent or legitimate interests; you can unsubscribe at any time |
| Measure how well our advertising works | Consent where the law requires it |
| Comply with law, respond to legal requests, and handle payment disputes | Legal obligations; legitimate interests |
3. AI training
As our Terms of Service (section 4.2) explain, we use de-identified and aggregated data derived from Your Content and your use of the Service, such as app structures, design patterns and usage statistics, to improve the Service and to develop and train AI models. Before we use data this way, we remove information that identifies you or any other person. We do not use your personal information, or End Users' personal data, to train AI models, and training never gives anyone else access to Your Content.
4. How we share information
We do not sell your personal information. We share it only as follows:
- Service providers who work for us under contract:
- product analytics (PostHog);
- advertising measurement (Google Ads, Google Analytics and Google Tag Manager);
- sign-in (Google);
- payments (Stripe);
- AI model providers (such as OpenAI, Anthropic and Groq), which receive the prompts, files and data needed to generate a result, including from your live apps;
- hosting and monitoring (such as Google Cloud and Grafana Cloud);
- email delivery (Google Workspace).
- Payment disputes and fraud: if you dispute a charge, we may give the payment processor and your bank records of the purchase, your acceptance of our Terms at checkout, your sign-ins and the credits you used.
- Apps you publish: anyone with the link can see a live app and what it shows.
- Legal and safety: when we believe in good faith it is needed to comply with law or legal process, protect anyone's safety, or protect our rights (Terms section 7.5).
- Business transfers: in a merger, acquisition or sale of assets, subject to this policy.
- With your consent or at your direction.
5. California privacy rights
We do not sell personal information. Sharing ad click identifiers and conversions with Google to measure our advertising may count as "sharing" for cross-context behavioral advertising under California law. You can opt out by emailing privacy@4rth.ai. California residents can ask to know, correct and delete their personal information, and we will not treat you differently for using these rights. We do not use or disclose sensitive personal information beyond what is needed to provide the Service.
6. Cookies and similar technologies
We and the providers in section 4 use cookies, local storage and similar technologies to keep you signed in (essential), understand how the Service is used (analytics) and measure our advertising (advertising). You can block or delete cookies in your browser; the Service may not work properly without essential cookies. You can limit personalised Google ads in My Ad Center (myadcenter.google.com).
7. How long we keep information
- Account information and Your Content: while your account is open. When you delete your account, we delete your apps, their data, your files and your account details, usually within a few days and at most 30 days. Copies in our backups are overwritten within 35 days.
- Usage, cost and billing records: we keep records of credits, usage and purchases after an account is deleted, linked only to an account number and holding no personal content, for accounting and to understand how the Service is used.
- Purchase, tax and billing records: 7 years, as tax and accounting law requires.
- Checkout acceptance records (Terms version, time, IP address): 3 years, to handle payment disputes.
- Analytics: session recordings for up to 30 days; other analytics events for up to 24 months.
8. International transfers
We are based in the United States, and we and our providers may process data in the US and other countries. Where the law requires, we protect transfers out of the EEA, UK and Switzerland with the EU Standard Contractual Clauses and the UK Addendum.
9. Apps you publish and their End Users
If your app collects personal data from End Users, you decide what is collected and why, and you are the controller. We process that data only to host and run your app, under our Data Processing Addendum. End Users should contact the app's creator about their data; if they contact us, we will pass the request on where we can.
10. Your rights
Depending on where you live, you can ask to:
- access your personal data, or get a copy you can take elsewhere;
- correct it;
- delete it;
- object to or restrict how we use it;
- withdraw consent you gave.
To make a request, email privacy@4rth.ai from your account's email address. We may need to verify who you are, and we reply within the time the law requires, usually 30 to 45 days. If we turn down a request, you can appeal by replying to our answer. In the EEA or UK you can also complain to your local data protection authority.
11. Security
We use reasonable technical and organisational measures to protect personal data, including encryption in transit and at rest. No system is perfectly secure. Please use a strong password and keep your login details safe. We will tell you about a security incident affecting your personal data where the law requires.
12. Children
The Service is for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact privacy@4rth.ai and we will delete it.
13. Changes to this policy
We may update this policy. We will post the new version with its date and, for significant changes, tell you by email or in the Service before they take effect.
14. Contact
4rth AI, Inc. · 4 Palo Alto Square, 3000 El Camino Real, Suite 200, Palo Alto, CA 94306, USA · privacy@4rth.ai