Last updated: March 2026
This Privacy Policy explains what information Valarchi collects, how we use it, and your rights regarding your data.
Account information
When you register, we collect your name, email address, password (stored as a secure hash — never in plain text), and organization name. If you sign in with Google, we receive your name and email from Google instead of a password.
GitHub repository data
When you connect a GitHub repository, we read its contents via a read-only GitHub app integration. We extract a semantic snapshot of your product. We do not store your source code. The snapshot is retained to power the planning agents and is visible to you in your product details page.
Planning artifacts
We store the planning artifacts you create using Valarchi — product requirements documents, app structure plans, wireframes, and technical specifications — to provide the service and allow you to access them across sessions.
API key
If you add your own Anthropic API key, it is encrypted before being saved. The key is never returned to the browser after storage. We store only the encrypted value.
Usage data
We record each AI agent invocation — which agent ran, the timestamp, token counts (input and output), which milestone it was for, whether it used trial credits or your own API key, and the invocation status. This data powers your Usage dashboard and our internal monitoring.
Cookies
We use cookies for authentication and session management. These are necessary for the service to function. We do not use advertising or tracking cookies.
We use your information to: provide and operate the Valarchi service; run AI planning agents on your behalf; track trial credits and usage; send transactional emails (account verification, password reset, important service notices); and improve the platform based on aggregate usage patterns.
We do not sell your data. We do not use your codebase content or planning artifacts to train our own models.
Anthropic
All AI agent calls are routed through Valarchi's backend to Anthropic's API. Your codebase snapshot and relevant planning context are included in those calls. Anthropic retains API inputs and outputs for 30 days under their standard API terms, after which they are deleted. Your content is not used to train Claude — user feedback sharing with Anthropic is disabled on our account. For full details, see Anthropic's Privacy Policy →
Supabase
We use Supabase as our database provider. Your account data, planning artifacts, and usage records are stored in Supabase-managed infrastructure. Supabase is SOC 2 Type II certified. For details, see Supabase's Privacy Policy →
If you choose to sign in with Google, your name and email are received via Google's OAuth service. We do not receive or store your Google password. Google's use of your data during the sign-in flow is governed by Google's Privacy Policy →
Your account data, semantic prodouct snapshots, and planning artifacts are retained for as long as your account is active. Anthropic retains API inputs and outputs independently for 30 days. If you close your account and request deletion, we will remove your personal data and planning artifacts. Contact team@valarchi.ai to make a deletion request.
We take reasonable measures to protect your data, including encryption of API keys at rest, organization-scoped data access, and read-only GitHub integration. For a full overview of our security practices, see our Security & Privacy page →
You have the right to access, correct, export, or delete the personal data we hold about you. To exercise any of these rights, contact us at team@valarchi.ai. We will respond within a reasonable timeframe.
Valarchi is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.
We may update this Privacy Policy as the product evolves. For material changes — such as new data collection practices or new third-party sharing — we will notify you by email at least 30 days before the change takes effect. Minor updates take effect upon posting. The "last updated" date at the top of this page reflects the most recent revision.
Questions about this policy? Contact us at team@valarchi.ai.
See also: Terms of Service · Security & Privacy