Effective date: March 3, 2025
This Privacy Policy explains how Amygware s.r.o., a company registered in the Czech Republic, operates RChat.dev ("the Service") and how we collect, use, and protect your personal data.
By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you have questions, contact us at info@amygware.com.
Information We Collect
We collect the following categories of information:
- Account data — email address, hashed password, display name
- Project data — R code you write, uploaded CSV and PDF files (including OCR-extracted text), generated plots
- Chat messages — your prompts to the AI assistant and the AI-generated responses
- Error logs — R code snippets and stack traces submitted when errors occur, used for debugging and service improvement
- Usage data — token/credit balance and consumption history
- Analytics — page views, browser information, and IP address collected by Vercel Analytics (no cookies used)
How We Use Your Information
- Service delivery — providing the R IDE, executing code, managing projects and files
- AI processing — sending your prompts, code, and file contents to third-party AI providers to generate responses
- Payments — processing credit purchases through our payment provider
- Error analysis — analyzing code errors to improve the Service
- Analytics — understanding usage patterns to improve the Service
Third-Party Services
We share data with the following third-party services as necessary to operate the Service:
| Service | Data Shared |
|---|---|
| Supabase | All user data (authentication, database storage, file storage) |
| OpenRouter | Chat messages, R code, CSV previews (first 10 rows), PDF content, file lists |
| Anthropic (Claude) | User prompts and code (via OpenRouter) |
| OpenAI (GPT-4o-mini) | User prompts and code (via OpenRouter) |
| Polar | Email, user ID (Polar handles all payment card data directly) |
| Vercel | Page views, IP address, browser information (hosting & analytics) |
AI-Specific Disclosures
- Your content (chat messages, R code, the first 10 rows of CSV files, and full PDF content) is transmitted to third-party AI providers to generate responses.
- AI-generated responses may be inaccurate or incomplete.
- Amygware s.r.o. does not use your data to train AI models. However, third-party AI providers operate under their own privacy policies, which may differ.
- We recommend reviewing the privacy policies of OpenRouter, Anthropic, and OpenAI.
Cookies & Local Storage
- Essential cookies — Supabase authentication cookies (HttpOnly, Secure). These are strictly necessary for the Service to function.
- localStorage — used to store a project counter and UI preferences locally in your browser.
- sessionStorage — used for temporary initialization data during your session.
We do not use marketing, advertising, or third-party tracking cookies.
Data Security
We implement appropriate technical measures to protect your data, including:
- All data transmitted over HTTPS
- Passwords are hashed and never stored in plain text
- Authentication cookies are HttpOnly and Secure
- Rate limiting to prevent abuse
- R code executes locally in your browser via WebAssembly — your code is not run on our servers
Data Retention
Your data is retained for as long as your account is active. Upon account termination or upon your request, we will delete your personal data within a reasonable timeframe, subject to any legal obligations requiring longer retention.
Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten")
- Restrict the processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Object to processing of your data
To exercise any of these rights, contact us at info@amygware.com. We will respond to your request within 30 days.
You also have the right to lodge a complaint with the Czech Data Protection Authority (UOOU — Urad pro ochranu osobnich udaju) at www.uoou.cz.
International Data Transfers
Your data may be processed outside the European Economic Area (EEA) by our third-party service providers. Where such transfers occur, they are protected by Standard Contractual Clauses or equivalent safeguards in accordance with GDPR requirements.
Children
The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us so we can delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.
Contact
Amygware s.r.o.
Czech Republic
Email: info@amygware.com
See also our Terms of Use.