Security & Privacy

Security and Privacy

Security and Privacy How We Protect Your Data - All data encrypted via TLS 1.3 - Database encryption at rest - Passwords hashed with bcrypt Your Code Privacy - Projects are private by default - Only you can access your code - We do not sell your code - We do not train AI on your code - You own 100% of generated code Infrastructure - Hosting: Cloudflare global edge - Database: Neon PostgreSQL (SOC 2) - DDoS protection included Reporting Vulnerabilities Found a security issue? Contact security@vulk.dev

Where is My Data Stored?

Where is My Data Stored? Infrastructure Application Hosted on Cloudflare global network. Database PostgreSQL on Neon (SOC 2 compliant), primarily EU region. File Storage Cloudflare R2 (global edge storage). AI Processing Requests are sent to AI providers (Anthropic, OpenAI, Google) for code generation. Data Residency Most data is processed in: - EU (primary) - US (AI providers) Encryption - All data encrypted in transit (TLS 1.3) - Database encrypted at rest - No plain text passwords stored Compliance We follow best practices for data protection including GDPR compliance for EU users.

Are My Projects Private?

Are My Projects Private? Default Privacy Yes. All projects are private by default. Who Can See Your Projects - Only you (the project owner) - Team members you invite (Pro/Business) - VULK staff only for support (with permission) What We Do NOT Do - We do not share your code - We do not sell your data - We do not train AI on your projects - We do not show projects publicly Public Sharing If you choose to share a preview URL, that specific preview becomes accessible to anyone with the link. Your source code remains private. After Deployment Deployed sites are public by default. Anyone can visit the URL. The source code is still private unless you export and share it.