Our privacy promise
TheSSS AI is built on the principle that your intellectual property belongs to you alone. Our zero-persistence architecture ensures that your code, requirements and project data never become part of our systems.
Memory-only processing
All operations occur in volatile memory.
No data mining
We never analyze your code for training.
Immediate deletion
Data is wiped when delivery completes.
Zero-persistence architecture
Our entire platform is designed around the principle that your intellectual property should never persist on our systems.
Input security
- Requirements encrypted in transit (TLS 1.3)
- Processed in isolated memory containers
- No logging or temporary file creation
- Automatic memory sanitization
Processing security
- AI models run in sandboxed environments
- Generated code exists only in volatile memory
- No cross-contamination between projects
- Real-time memory monitoring and protection
Delivery security
- Direct encrypted transfer to your repository
- No intermediate storage or caching
- Immediate memory wiping post-delivery
- Cryptographic proof of deletion
1. Information we collect
Account information
To provide our service, we collect basic account information:
- Identity: name, email address, company name (optional)
- Authentication: secure password hash, OAuth tokens where applicable
- Billing: payment information processed by third-party providers (Stripe)
- Communication: support tickets, correspondence history
Storage location: account data is stored in encrypted databases with industry-standard security measures.
Project requirements (zero persistence)
What we process
- Project specifications and requirements
- Technology stack preferences
- Architecture guidelines
- Feature descriptions and user stories
What we don't store
- Project requirements text
- Generated code or documentation
- Temporary files or logs
- Processing metadata or analytics
Usage analytics (privacy-preserving)
We collect minimal, anonymized usage data to improve our service:
- Feature usage patterns (anonymized)
- Performance metrics and error rates
- Platform and browser information
- Geographic region (country level only)
No code analysis: we never analyze your project content for usage analytics.
2. How we use your information
Service delivery
- Process your project requirements
- Generate custom code foundations
- Deliver results to your repository
- Provide customer support
- Process billing and payments
Platform improvement
- Monitor system performance
- Identify and fix technical issues
- Enhance user experience
- Develop new features
- Ensure security and compliance
What we never do with your data
- Train AI models with your code
- Sell or share project data
- Store or cache your requirements
- Analyze content for marketing
- Create backups of generated code
- Share with third parties without consent
3. Data security and protection
Technical safeguards
Encryption
- TLS 1.3 for all data in transit
- AES-256 encryption for stored data
- End-to-end encryption for sensitive operations
- Regular key rotation and management
Infrastructure
- SOC 2 Type II compliant cloud providers
- Multi-layer firewalls and intrusion detection
- Regular security audits and penetration testing
- 24/7 security monitoring and response
Access controls
Role-based access
Principle of least privilege.
Multi-factor authentication
Required for all staff.
Audit trails
Complete access logging.
4. Your privacy rights
Data subject rights (GDPR/CCPA)
- Access: request copies of your personal data
- Rectification: correct inaccurate information
- Erasure: delete your account and data
- Portability: export your data in standard formats
- Restriction: limit processing of your data
- Objection: opt out of certain data uses
Exercise your rights
Contact us to exercise any of your privacy rights. We respond to all requests within 30 days.
5. Third-party services
We use carefully selected third-party services to provide our platform:
Payment processing
- Stripe: secure payment processing
- PCI DSS Level 1 certified
- No storage of payment data on our servers
Analytics
- Google Analytics: anonymized usage metrics
- IP addresses masked
- No personal data shared
Infrastructure
- Cloud providers: AWS, Google Cloud
- SOC 2 Type II compliance
- Data residency controls
Important: third parties never have access to your project requirements or generated code.
6. Cookies and tracking
Essential cookies
- Authentication and session management
- Security and fraud prevention
- Platform functionality and preferences
- Load balancing and performance
These cannot be disabled without affecting functionality.
Optional cookies
- Anonymous usage analytics
- Performance monitoring
- Feature usage optimization
- Error tracking and debugging
You can opt out of these in your account settings.
The cookie policy lists the cookies this website may set.
7. International data transfers
As a global platform, we may process data across different jurisdictions:
Safeguards
- Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
- Additional technical and organizational measures
- Regular compliance assessments
Data residency
- Account data stored in secure data centers
- Enterprise customers can specify regions
- Project data never leaves processing memory
- Compliance with local data protection laws
8. Policy updates and contact information
Privacy policy updates
We may update this Privacy Policy to reflect changes in our practices or for legal reasons:
- Material changes: 30-day advance notice by email
- Minor updates: posted on this page with an updated date
- Emergency changes: immediate notification for security updates
We encourage you to review this policy periodically.
Privacy questions or concerns?
Our Data Protection Officer and privacy team can help with any question about your data rights or our privacy practices.
- Security team
- support@thesss.ai
- Response time
- 30 days maximum