Privacy Notice
Your work deserves careful handling.
Effective 28 August 2026
This notice explains how Filuto, the operator of filuto.com, handles personal data when you visit our site, create an account, communicate with us, or use our AI-assisted development and hosting service.
1. Who is responsible
Filuto is the controller of account, service, security, and support information described here. Contact us at hello@filuto.com for privacy questions or to exercise your rights.
For personal data that a customer places in its own project or collects from its own website users, that customer normally decides why and how the data is used and acts as controller. Filuto processes that hosted data for the customer as a service provider or processor. Requests about a customer’s website should normally be directed to that customer first.
2. Information we handle
- Account and authentication information: email address, user identifier, email-verification state, acceptance of terms, session information, and security events.
- Project content: project names, briefs, prompts, messages, task history, source code, files, configuration, deployment information, database content, domains, and output produced while working on a project.
- Connected-service information: identifiers, permissions, activity, and other information exchanged with services you connect.
- Technical and usage information: IP address, request time, browser and device information, service events, error logs, resource usage, security signals, and diagnostic information generated when the Service is used.
- Communications: messages and contact details you provide when requesting support, reporting abuse, or otherwise contacting us.
Please avoid including unnecessary personal data or secrets in project prompts. A public deployment may expose information to anyone on the internet.
3. Why we use it
| Purpose | Legal basis where GDPR applies |
|---|---|
| Create accounts, authenticate users, build projects, host deployments, and provide requested features. | Performance of our contract with you. |
| Secure the Service, prevent fraud and abuse, diagnose faults, enforce our Terms, and improve reliability. | Our legitimate interests in operating a safe and dependable service. |
| Send verification, sign-in, security, and password-reset messages that you request. | Performance of our contract and our legitimate interest in account security. |
| Answer support, privacy, legal, and abuse enquiries. | Performance of our contract, legitimate interests, and legal obligations, depending on the request. |
| Keep records and disclose information where the law requires it. | Compliance with a legal obligation. |
| Use optional analytics, marketing, or non-essential cookies if introduced later. | Your consent where consent is required. You may withdraw it. |
Where we rely on legitimate interests, we consider the necessity and effect of the processing and the safeguards available to you. You may object as described below.
4. AI and project processing
Project instructions and relevant context are processed only to provide the AI-assisted features you request. Filuto applies strict privacy safeguards to this processing and does not use your project content to train AI models.
Filuto uses automation to produce and deploy software, not to make legal or similarly significant decisions about you. Generated output must be reviewed for the intended use. Do not provide special-category or highly sensitive personal data to a model unless the feature expressly supports it and you have an appropriate legal basis and safeguards.
5. Who receives information
We disclose only what is reasonably needed for the purposes above:
- Cloud service providers support hosting, storage, account access, communications, and delivery of the Service.
- Repository and connected-service providers process information needed for projects and integrations you use.
- AI service providers process project context only when needed to generate the output you request and under strict data-handling requirements.
- Website service providers support delivery and operation of our public pages.
- Professional advisers and authorities may receive information when reasonably necessary to obtain advice, protect rights, investigate abuse, or comply with a valid legal obligation.
- A successor organisation may receive information as part of a merger, financing, reorganisation, or sale, subject to applicable confidentiality and privacy requirements.
We do not sell personal data.
6. International transfers
Some service providers may process information outside your country. Where required, we use legally recognised safeguards for international transfers.
Contact us for more information about safeguards relevant to your data.
7. Retention
We keep account and project information while the account or project is active and afterwards only as long as reasonably needed to provide the Service, complete deletion, protect Filuto and its users, resolve disputes, enforce agreements, and comply with law.
When an account is closed, live deployments and active project data may be removed. Limited information may remain where necessary for security, disputes, or legal obligations and is deleted or anonymised when no longer needed. Contact us if you need information about a category’s current retention period.
8. Cookies and similar technology
Filuto uses a necessary cookie to maintain your session and protect your account. It is not used for advertising. We do not currently use analytics or advertising cookies on filuto.com. If that changes, we will update this notice and request consent where required.
9. Security
We use appropriate technical and organisational measures intended to protect information against unauthorised access, loss, misuse, and alteration. No internet service can guarantee absolute security. Please use a unique password, protect access to your account, restrict collaborators, and report suspected compromise promptly.
10. Your rights
Depending on where you live and subject to legal exceptions, you may have rights to:
- be informed and obtain access to your personal data;
- correct inaccurate or incomplete data;
- request deletion or restriction of processing;
- receive certain data in a portable, machine-readable format;
- object to processing based on legitimate interests or to direct marketing;
- withdraw consent without affecting earlier lawful processing; and
- complain to a data-protection authority.
Send a request to hello@filuto.com. We may need to verify your identity.
11. Children
The Service is not directed to children and accounts require users to be at least 18. If you believe a child has provided personal data, contact us so we can investigate and remove it where appropriate.
12. Changes and contact
We may update this notice when the Service, providers, or law changes. We will publish the new effective date and give additional notice of material changes where appropriate.
Privacy, security, and data requests: hello@filuto.com.