Privacy Policy

01 / Who we are

TheArchitect is a visual cloud-architecture design and deployment tool operated by TheArchitect ("we", "us"). This policy explains what personal data we process when you use https://www.thecloudarchitect.dev and the application, and the rights you have over it.

For any privacy question or to exercise your rights, contact thearchitect.app@gmail.com.

02 / Data we collect

• Account data: the email address and password you provide at sign-up. Passwords are handled by our authentication provider and stored only as salted hashes — we never see them in plain text.
• Workspace data: the architecture diagrams, node configuration, and templates you create and choose to save.
• A per-user AWS External ID that we generate to secure role assumption. We do NOT store your AWS account access keys, and your deploy Role ARN is kept only in your active browser session, not on your saved profile.
• Technical data: diagnostic and error information (for example browser type, page, and stack traces) collected to keep the service reliable.

03 / How we use your data

• To create and operate your account and authenticate you.
• To save, load, and let you export the diagrams and templates you create.
• To assume the IAM role you connect and carry out the AWS actions you request (validation, cost lookup, change-set preview, deployment, and stack-status polling), using only temporary AWS credentials that are used server-side and are not persisted.
• To monitor, debug, and secure the service.
• To respond to your support and privacy requests.

04 / Legal bases (GDPR/UK GDPR)

Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (to provide the service and your account); our legitimate interests (to secure, debug, and improve the service); your consent (for non-essential cookies — see the Cookie Policy); and compliance with legal obligations.

05 / Service providers (sub-processors)

We share personal data only with the providers that help us run the service:

• Supabase — authentication and database hosting for your account and saved diagrams.
• Sentry — error and performance monitoring (diagnostic data).
• Our hosting provider — to serve the application.
• Amazon Web Services — only when you connect an AWS account and request an action; we assume your IAM role using temporary credentials to perform that action.

06 / Your AWS account and credentials

When you connect AWS, you deploy an IAM role in your own account and paste its Role ARN. We assume that role with short-lived credentials scoped to the actions you request. We do not store your Role ARN on your profile, we do not store long-term AWS keys, and the temporary credentials we obtain are used only within server requests and are not written to our database. You remain responsible for the AWS resources you deploy and any charges AWS bills for them.

07 / Cookies and local storage

We use strictly necessary cookies for authentication and a small amount of browser local storage for preferences (such as your theme and your cookie choice). See the Cookie Policy at /cookies for the full list.

08 / Data retention

We keep your account and workspace data for as long as your account is active. Diagnostic data is retained for a limited period for security and debugging. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain it to meet a legal obligation.

09 / Your rights

Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Where we rely on consent, you may withdraw it at any time.

10 / How to request deletion or exercise your rights

To request access to, export of, or deletion of your data, email thearchitect.app@gmail.com from the address associated with your account. We will verify your request and respond within the time required by applicable law. You can also request deletion of individual saved diagrams from within the app.

11 / Children

The service is not directed to children. You must be at least 16 years old to create an account. If you believe a child has provided us personal data, contact thearchitect.app@gmail.com and we will delete it.

12 / International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for those transfers.

13 / Security

We use technical and organisational measures — including encryption in transit, hashed passwords, scoped temporary AWS credentials, and access controls — to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

14 / Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by notice in the app.

15 / Contact

Questions about this policy: thearchitect.app@gmail.com.