Privacy Policy
Plain-language summary of what we collect and why.
Last updated: October 6, 2026. Stylvia ("we", "us") provides website hosting with an AI editor at stylvia.net and app.stylvia.net. This policy explains what we collect, why, and the choices you have.
Information we collect
- Account information: your email address and, optionally, your name.
- Google sign-in data: if you choose "Sign in with Google", we request only the
openid,emailandprofilescopes. From Google we receive and store your email address, your name, and your Google account ID (used only to recognise you on your next sign-in). Google may also send your profile picture URL; we don't store it. We never get your Google password, and we don't access your Gmail, contacts, Drive, calendar or any other Google data. - Security data: your two-factor settings (an encrypted authenticator secret and hashed recovery codes), and sign-in and publishing events, with IP address and browser type, for security and audit.
- Your website content: the files, text and images in your sites, your saved snapshots, and the messages you send to the AI editor.
- Domain registration data: the contact details registries require, only if you register a domain through us.
How we use it
- To sign you in, keep your account secure, and confirm publishing with your second factor.
- To host and serve your website, and to run the AI editor on your instructions.
- To send sign-in and security codes by email. We don't send marketing email without your consent.
- To provide support, prevent abuse, and comply with the law.
We don't sell your personal information, and we don't use it for advertising.
Google user data
Stylvia's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in data only to create and sign in to your Stylvia account. We don't share it with third parties, except the service providers listed below that host our service. We don't use it for advertising, and we don't use it to train AI models.
AI editing
When you ask the AI editor for a change, we send your message and the relevant website files to the AI model you selected, through OpenRouter. We use only US model providers that don't train on API data. Your Google account data is never sent to AI providers. The editor only edits your website's text and code: it doesn't generate images of people.
Service providers
We use Cloudflare (hosting, storage and DNS), OpenRouter and the AI model providers you select (to process editing requests), Resend (to deliver sign-in and security codes), Google (only if you choose Google sign-in) and our domain registrar partner. Each provider processes data only to provide its service to us.
Your choices and rights
- Download all of your website files at any time from the portal.
- Delete individual sites, or ask us to delete your account. We delete your account data, including any Google sign-in data, within 30 days.
- Disconnect Google at any time from your Google account permissions.
- Email privacy@stylvia.net to access, correct, export or delete your information.
Retention
We keep account data while your account is active. Sign-in codes expire within 15 minutes, and sessions within 30 days. Deleted website content and account data are removed from our storage within 30 days, unless the law requires us to keep them.
Security
Data is encrypted in transit with HTTPS, and authenticator secrets are encrypted at rest. Publishing to your live site requires a second factor.
Children
Stylvia isn't intended for anyone under 18, and we don't knowingly collect children's data.
Changes
We'll post updates on this page and notify you of material changes by email or in the portal.