Overview
Cleo is built with privacy as a core principle. Your source code never leaves your machine during normal operation. The Cleo server runs locally on your computer, and only specific element context is sent to AI providers when you request code modifications.
Information We Collect
Account Information
When you sign in with GitHub or Google, we receive your name, email address, and profile picture from the OAuth provider. This is used to identify your account and manage your subscription.
Conversation History
If you're signed in, your prompts and AI responses may be stored to provide conversation history features. This includes the element context you select and the code modifications suggested.
Usage Data
We track AI model usage (tokens consumed) to manage your credit balance and for billing purposes. This does not include the content of your prompts or code.
Local Storage
Cleo stores preferences locally in your browser, including UI settings, tooltip states, and project-specific configurations. This data never leaves your device.
AI Processing
When you request code modifications, Cleo sends the selected element context and your prompt to AI providers (Anthropic Claude or Cerebras) via Cloudflare AI Gateway. This includes:
- Your natural language prompt
- The selected element's component hierarchy
- Relevant source file contents for context
Cloudflare AI Gateway provides caching, rate limiting, and analytics for AI requests. We do not use your prompts to train AI models.
Third-Party Services
- Convex — Database for account data and conversation history
- Anthropic / Cerebras — AI model providers for code generation
- Cloudflare — AI Gateway for request routing and caching
- Autumn — Credit tracking and usage metering
- Stripe — Payment processing for subscriptions
- Resend — Email communications and audience management
- Visitors — Anonymous website analytics (cleo.build only)
Data Retention
Account data and conversation history are retained while your account is active. You can request deletion of your data by contacting us. Usage logs are retained for billing reconciliation and may be anonymized for aggregate analytics.
Your Rights
You can request access to, correction of, or deletion of your personal data at any time by contacting us at [email protected].
Contact
For privacy-related questions, contact us at [email protected].