Privacy Policy

RyaanCMS ("RyaanCMS", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our self-hosted AI application builder platform.

Because RyaanCMS is self-hosted software, the primary data controller for your installation is you — the person or organization running the instance. This policy also covers the RyaanCMS project's own data practices.

---

1. Information We Collect

1.1 Account Information

When you create an account during installation or registration, we collect:

• Name and email address
• Encrypted password (never stored in plain text)
• Account creation timestamp

1.2 Project & Usage Data

As you use the platform, the following data is stored in your own database:

• Projects you create, including names, descriptions, and settings
• Files and source code generated for your projects
• AI prompts and conversation history within the builder
• Marketplace plugin installation records and license keys

This data is stored entirely on your own server and is not transmitted to us.

1.3 Technical & Log Data

Your web server may automatically log:

• IP addresses and browser/device information
• Pages visited and actions taken within the application
• Error logs and performance metrics

This data is stored in your server logs and is under your control.

1.4 Third-Party AI Provider Data

When you use AI-powered features, your prompts and context data are transmitted to the AI provider you have configured (e.g., OpenAI, Anthropic, Google Gemini). We do not intercept this data, but you should be aware that:

• Your prompts are subject to the privacy policy of the respective AI provider
• You should review OpenAI's, Anthropic's, or your chosen provider's privacy policy
• Avoid sending personally identifiable information (PII) in AI prompts

2. How We Use Your Information

Within your self-hosted installation, your data is used to:

• Authenticate your identity and maintain your session
• Store and retrieve your projects and generated code
• Process AI generation requests by forwarding prompts to your configured AI provider
• Validate marketplace license keys and enforce domain-locking
• Send system notifications (e.g., build complete, error alerts) if configured

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage & Security

Since RyaanCMS is self-hosted, your data resides on servers you control. We strongly recommend:

• Using HTTPS (TLS/SSL) for your installation
• Keeping your server and Laravel dependencies up to date
• Using strong, unique passwords and enabling any available two-factor authentication
• Regularly backing up your database and uploaded files
• Restricting database and server access with proper firewall rules

We are not responsible for data breaches or security incidents on your own hosted infrastructure.

4. Cookies & Session Data

RyaanCMS uses cookies to maintain your authenticated session. These cookies are:

• Session cookies — temporarily store your login session (expire when you close the browser or after the configured timeout)
• CSRF tokens — protect against cross-site request forgery attacks
• Remember-me cookies — if you opt in, extend your session for up to 30 days

No tracking or advertising cookies are used by RyaanCMS.

5. Third-Party Integrations

RyaanCMS integrates with third-party services that have their own privacy policies:

• OpenAI — openai.com/privacy
• Anthropic (Claude) — anthropic.com/privacy
• Google (Gemini) — policies.google.com/privacy
• Bunny Fonts — fonts.bunny.net (used for typography, no tracking)

You choose which integrations to enable. We recommend reviewing each provider's privacy policy before enabling their services.

6. Data Retention

Since you control your own server:

• Your data is retained for as long as your installation is active
• You can delete any project, user account, or data at any time through the admin interface or directly in the database
• Deleting your RyaanCMS installation removes all associated data from that server

7. Your Rights

As a user of a self-hosted RyaanCMS installation, you have the right to:

• Access — View all data stored about your account and projects
• Correction — Update your profile information at any time
• Deletion — Delete your account and all associated data
• Portability — Export your projects and generated code
• Restriction — Limit how AI providers process your data by using local/offline AI models

To exercise these rights, use the account settings within the application or contact your system administrator.

8. Children's Privacy

RyaanCMS is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through your RyaanCMS installation, please delete that information immediately.

9. International Data Transfers

If you configure AI providers such as OpenAI or Anthropic, your data (prompts) may be transferred to and processed in countries outside your own, including the United States. These providers maintain their own data processing agreements and comply with international data transfer regulations (e.g., GDPR Standard Contractual Clauses).

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of RyaanCMS after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how your data is handled within RyaanCMS, please reach out through:

• The official RyaanCMS project repository
• The contact information provided on the RyaanCMS website
• Your system administrator (for questions specific to your hosted instance)