Effective: March 6, 2026 · Last updated: March 6, 2026
Fabricate ("we," "us," or "our") provides AI-assisted software generation tooling. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have. It applies to our website at fabricate.build and all related services (the "Service").
If you are located in the European Economic Area, United Kingdom, or Switzerland, the GDPR-specific section below applies to you. If you are a California resident, the CCPA section applies.
When you sign in via a third-party provider (e.g., Google, GitHub via Clerk), we receive basic profile information such as your name and email. We do not receive your passwords.
We use the information we collect to:
We do not use your prompts or generated content to train AI models or sell your data to third parties for advertising.
If you are in the EEA or UK, we process your personal data under the following legal bases:
We share personal data only with vendors and partners necessary to operate the Service ("sub-processors") and as required by law. We do not sell your personal data.
| Vendor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and subscription management | USA |
| Clerk | Authentication and user identity management | USA |
| Cloudflare | Infrastructure, CDN, serverless compute, database, and storage | Global |
| Anthropic | AI model inference for code generation | USA |
| Resend | Transactional and lifecycle email delivery | USA |
| PostHog | Product analytics and feature flags (consent-gated) | USA / EU |
| Sentry | Error monitoring and performance tracking | USA |
| Meta (Facebook) | Conversion tracking via Meta Pixel (consent-gated) | USA |
| Crisp | Customer support chat widget (consent-gated) | EU |
| GitHub (optional) | Source control sync when you enable GitHub integration | USA |
We may also disclose data: (a) to comply with legal obligations or respond to lawful requests from public authorities; (b) to protect our rights, property, or safety or that of our users; or (c) in connection with a merger, acquisition, or sale of all or a portion of our assets, in which case we will notify you before your data is transferred to a new entity.
We use the following categories of cookies and similar technologies:
You can manage cookie preferences through our cookie banner or your browser settings. Withdrawing consent for non-essential cookies does not affect the lawfulness of prior processing. For more details, see our Cookie Policy.
We retain personal data for as long as necessary to provide the Service and comply with legal obligations:
After account deletion, we will delete or anonymize your personal data within 30 days except where longer retention is required by law.
We are based in the United States. If you access the Service from the EEA, UK, or Switzerland, your personal data will be transferred to and processed in the USA and other countries that may not have equivalent data protection laws.
We rely on the following transfer mechanisms to ensure adequate protection:
You may request a copy of the applicable transfer safeguards by contacting us at support@fabricate.build.
We implement administrative, technical, and organizational safeguards appropriate to the risk, including encryption in transit (TLS), access controls, and security monitoring. No security system is perfect; we cannot guarantee absolute security. If we become aware of a security breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.
The Service is not directed to children under 13 years of age, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at support@fabricate.build and we will promptly delete it. Users between 13 and 17 years old may use the Service with parental or legal guardian consent, as described in our Terms of Service.
Regardless of your location, you may:
If you are located in the EEA, UK, or Switzerland, you have additional rights under the GDPR and equivalent laws:
To exercise these rights, contact us at support@fabricate.build. We will respond within 30 days (extendable by an additional 60 days for complex requests). We may ask you to verify your identity before fulfilling certain requests.
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you additional rights:
To submit a CCPA request, contact us at support@fabricate.build or use the unsubscribe link in any email we send. We will respond within 45 days (extendable to 90 days with notice).
Categories of personal information collected in the past 12 months: Identifiers (name, email, IP address); commercial information (subscription and billing history); internet activity (usage logs, session data); professional information (generated applications and prompts); and inferences drawn from the above. We collected this information for the business purposes described in Section 2.
We currently do not respond to "Do Not Track" browser signals because no industry standard for such signals has been established. You can control analytics tracking via our cookie banner.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service at least 30 days before the changes take effect. We encourage you to review this policy periodically. Continued use of the Service after the effective date of the updated policy constitutes acceptance.
For privacy questions, requests, or complaints, contact us at support@fabricate.build.
EEA/UK residents may also contact our representative or lodge a complaint with your local data protection authority.