Privacy
This page sums up, in plain words, what Highwind does with your data. The reference text is Highwind’s privacy policy.
What Highwind stores
Section titled “What Highwind stores”| Data | Why |
|---|---|
| Your account: email address and, if you sign in with Google or GitHub, the name and picture provided by that service | Sign you in, send you service emails |
| Your projects: your messages, the images you add, the generated code, version history, publishing settings | Provide the service: build, keep history, publish |
| Your usage: credits used, requests run (duration, estimated cost), technical logs | Count credits, run and secure the service |
| Your connections: API keys, Google and context source tokens, encrypted; the connected Google account’s address | Let your apps and the agent use these services |
| Product analytics: a few key events (sign-up, project created, requests, publishing, connector added), tied to your account ID, without your email, your projects’ content or your IP address | Improve the product |
| Audience measurement, only if you accept it: the pages viewed on highwind.app | Understand how the site is used |
| Waitlist: email address, first name and intended use if provided, language, a non-reversible hash of the IP address | Manage invitations |
| Reports: the report’s content, a non-reversible hash of the IP address | Moderate published apps, prevent abuse |
Highwind shows no ads and sells no data.
What’s sent to the AI model
Section titled “What’s sent to the AI model”To build your app, your messages, the images you attach, the project’s code and what the agent reads in your context sources are sent to the AI model provider (OpenAI), only to generate the answer. Highwind doesn’t use your projects to train models.
Your API keys are never sent to the AI: the agent only knows whether a key is set.
Where data is hosted
Section titled “Where data is hosted”| Building block | Where |
|---|---|
| Highwind platform (API, app building) | France (OVHcloud) |
| Highwind accounts and projects | Germany, Frankfurt (Supabase) |
| Each app’s build environment | European Union (Modal) |
| Your apps’ databases (backends) | France, Paris (Supabase) |
| Emails sent by Highwind | Ireland (Resend) |
| Published apps and files | Cloudflare’s global network, close to visitors |
| AI model that writes the code | United States (OpenAI) |
| Technical error tracking | European Union (Sentry) |
| Technical tracking of AI builds (messages and code included) | Germany (Langfuse) |
| Product analytics and audience measurement | European Union, Germany (PostHog) |
Some of these providers are companies based in the United States (OpenAI, Cloudflare, Modal): these transfers outside the European Union are described in the privacy policy.
Your apps’ users’ data
Section titled “Your apps’ users’ data”If your app has a backend, its users’ data (accounts, content, files) is stored in its own database, hosted in Paris. For this data, you are the data controller and Highwind acts as a processor: it’s up to you to inform your app’s users and to only collect what you need.
The same goes for data your app sends to outside services through your connectors (emails via Resend, rows in Google Sheets, contacts in a CRM…): it’s processed by those services, under their own terms.
Consent in the apps you build
Section titled “Consent in the apps you build”When the agent wires a measurement tool into your app (Google Analytics, PostHog or Kameleoon), it adds the consent required in the European Union:
- a cookie banner where the visitor accepts or declines;
- nothing is loaded or measured until the visitor accepts;
- the choice is kept in the visitor’s browser, with a way to change it later;
- with Kameleoon, the banner is wired to Kameleoon’s consent (accepting turns it on, declining turns it off).
Add a cookie banner and a "Privacy" page explaining what data the site collects.Highwind’s cookies
Section titled “Highwind’s cookies”Highwind uses no advertising cookies.
- Without your consent, Highwind only stores what’s strictly needed in your browser: your sign-in session, your language, your theme, the idea typed before signing in (7 days at most, erased as soon as the project is created), the editor tour once completed, and your audience measurement choice.
- Audience measurement (PostHog, hosted in the European Union) is only loaded if you click Accept in the Analytics banner. Decline and Accept are shown side by side, and nothing is recorded if you decline.
- Change your mind: the Manage cookies link, at the bottom of the public site’s pages, reopens the banner. If you withdraw consent, the measurement data is erased from your browser. Your choice is kept for 6 months, then asked again.
Apps published on highwind.site are made by Highwind users and may use their own cookies, under their authors’
responsibility. See the Cookies page.
How long data is kept
Section titled “How long data is kept”- Account and projects: as long as your account is active. If you delete it, they’re erased within minutes. See Delete your account.
- Backend of an unpublished app: deleted after 24 hours without activity.
- Product analytics and audience measurement: 12 months at most.
- Your audience measurement choice: 6 months.
Your rights
Section titled “Your rights”You have the right to access, rectify, erase, restrict, object to and port your data. In practice:
- Get your work back: each app’s code can be downloaded at any time from the editor (Download the code (.zip)).
- Erase everything: delete your account from Settings → Account.
- Remove access: Disconnect Google or a context source on the Connectors page revokes access and erases the tokens.
- Any other request (access, objecting to product analytics…): write to rgpd@highwind.app. You can also lodge a complaint with the CNIL (the French data protection authority).