Privacy

What happens to what you give us.

G2 is two people, Ryan Gogerty and Nick Giacchi. This page says what we collect when you use g2builds.com and the Build Room, where it goes and how long it stays. If any of it stops being true, we change this page before we change the product.

Last updated October 23, 2026

The short version

What you type in the Build Room goes to Anthropic, the company behind Claude, to write your app. Neither we nor Anthropic train AI models on it.
Anthropic deletes it within 30 days, unless it is flagged for abuse or the law requires keeping it.
When you give us your email to start a build, it comes to our inbox with your description, so one of us can reply. We also email that address one link, to save your build. Once you open it, at most three emails about your build follow, each with a one-click unsubscribe.
You can delete your account yourself, at once, on the sign-in page.
Your app lives in your browser and, once you give your email, in our database, so the link can save it to your account. A build nobody saves is deleted after 2 days. A shared link stops working after 30 days.
We do not sell your information, and we use no advertising cookies.

What you give us, and where it goes

Everything the site and the Build Room collect, one row at a time.

Your description of the business

Where it goes: Our server, then Anthropic, the company behind the AI model Claude, which writes your app. When you start a build, it also comes to our inbox with your email, so one of us can follow up, and it is kept with your build in our database (see “Your app”).
How long it is kept: Anthropic deletes it within 30 days, unless its systems flag it for breaking its usage policy (then up to 2 years) or the law requires keeping it. Our inbox: until you ask us to delete it. Our database: with the build it asked for, as long as that build is kept (see “Your app”).
Good to know: Never put customer records, passwords or anything private here. The Build Room works with sample data.

The changes you ask for

Where it goes: Our server, then Anthropic, together with your app's current code, each time you ask for a change. What you asked for, and the one-line summary of what changed, are kept with that version of your app.
How long it is kept: Anthropic: as for your description. Ours: as long as your app is kept (see “Your app”).

Your website address, if you use “Your website”

Where it goes: Our server visits that one page and reads its headings, prices and phone number into your description, where you can see and correct them.
How long it is kept: We keep nothing from the visit itself. What lands in your description is treated like the description.
Good to know: Use a site you own or are allowed to use.

Your logo

Where it goes: Read in your own browser to pick a color. It is never uploaded.
How long it is kept: Not kept anywhere.

Your voice, if you use the mic button

Where it goes: Your browser's own speech service turns it into text. Some browsers do this on your device; Chrome may send the audio to Google, and Safari to Apple.
How long it is kept: Their policies. We only ever receive the text, which is treated like your description.
Good to know: Our separate voice-call feature is switched off.

Your email address, when you start a build

Where it goes: Our inbox, with your description, sent through Resend, our email provider. We also send that address one email: a link to save your build. It is the only email an address gets from us before someone opens that link, and it holds nothing but the link. Once it is opened, we send at most three more about your build: what is still pretend in it, a day after; a note the day before Launch Week ends; and one check-in if it sits untouched for a week, which also offers our paid review. Each has a one-click unsubscribe. You also get a sign-in link whenever you ask for one, and one confirmation if you delete your account. Our database keeps the address in one place, your account (below). Your browser also remembers it, so we can fill it in next time.
How long it is kept: Our inbox: until you ask us to delete it. Resend keeps its record of each message for 30 days. Our database: see “Your account”. Your browser: until you clear it.

Your account

Where it goes: Our database holds your email address, when the account was made, when you confirmed the address and last signed in, when we last emailed you a link, the counts of builds and changes you have used, with a dated line for each one taken or handed back, which of the three emails about your build we sent and when, and whether you unsubscribed from them. A link is asked for by typing your address; opening it confirms the address and signs that browser in with one cookie, g2_session, holding a random key, which is swapped for a new one each day the sign-in is used. We keep only a scrambled form (a one-way hash) of that key and of each link, with when the link was sent, never the key itself. No other table in our database holds your address.
How long it is kept: Until you delete it yourself, on the sign-in page. That deletes the account, its saved builds with every version, the links shared from them and its sign-ins, at once. An address whose link is never opened is deleted after a day. A link works once, for 30 minutes, and its record goes a day after that. A sign-in lasts 30 days from the link, or until you sign out, here or everywhere at once. A swapped-out key stops working two minutes later. A daily sweep deletes each one once it is past its time, so allow up to a day more.

Your name, email and message on a form

Where it goes: The contact form, the “send it over” form on your estimate and the “five more” form all come to our inbox. The contact and estimate forms also send you one confirmation email.
How long it is kept: Until you ask us to delete it.

If our email fails

Where it goes: Your email address and which form you used are written to our hosting logs instead, so we can write back by hand and ask again. What you wrote is not, and no log line holds a description, a change you asked for or your app’s code.
How long it is kept: 1 day, which is how long our current hosting plan keeps logs.

Your app (the code)

Where it goes: Your browser keeps it. Once you have given your email, our database (at Neon) also keeps its versions: the first build and the latest 50, with your description and what each change asked for, so the link can save it to your account and you can open it on another device. An older change is deleted once 50 newer ones follow it. While a build is being written, our database also keeps its progress, so you can refresh or close the tab and come back to it. It is sent to Anthropic each time you ask for a change.
How long it is kept: Saved to your account: until you delete it, which removes every version and any link shared from it at once, or delete your account. Not saved (nobody opened the link): deleted 2 days after it was made. The record of the build itself, with its progress: 2 days after it began. The daily sweep deletes each, so allow up to a day more. In your browser: until you clear it. Some browsers, Safari among them, clear site data after about 7 days without a visit.
Good to know: You can download it whenever you like.

Shared links

Where it goes: When you press Share, your app's code is stored in our file storage at Vercel, private and encrypted at rest by Vercel. Anyone with the link can open the page. Search engines are asked not to list it.
How long it is kept: 30 days, or until you delete the link.
Good to know: A shared page shows your app with its sample data, plus anything from your description it displays, such as your business name.

Usage limits

Where it goes: One cookie, g2_pass, holds a signed random pass id and nothing else. Our database keeps that id with the count of builds and changes it has used, which account it belongs to once a link is opened, and what each AI call cost us (which model, how much text, how long it took). To stop one browser running up the bill, it also counts requests against a scrambled form of your IP address, and requests for links against a scrambled form of your email address, never either one itself. These records hold no name, email or anything you typed.
How long it is kept: Cookie: 24 hours. Request counts: about a day. Pass counts: 2 days after the pass ends. Build attempts: 30 days. A daily sweep deletes each one once it is past its time, so allow up to a day more. Cost records: 400 days, tied only to a scrambled pass id.

Usage numbers

Where it goes: Vercel Web Analytics counts page views, named button presses and the steps of a build (a draft shown, a build finished, a change made, a link shared), as counts and short codes. It records no names, emails or anything you type, and it sets no cookies.
How long it is kept: Vercel keeps these counts for at least 12 months, the reporting window on our plan.

Payment, if you buy a Launch Review

Where it goes: Stripe takes the payment. We see your name, email and what you paid, never your full card number.
How long it is kept: As long as tax and accounting rules require us to keep payment records.

A call you book

Where it goes: Cal.com takes your name, email and the time you pick, and sends it to us.
How long it is kept: Until you ask us to delete it. Cal.com keeps its own copy under its policy.

The AI that writes your app

We use Claude, made by Anthropic, through Anthropic’s API, its service for businesses.

Anthropic does not train its models on what businesses send through its API by default. We train no models at all.
Anthropic deletes what we send within 30 days. Content its systems flag for breaking its usage policy can be kept for up to 2 years, and the safety scores attached to it for up to 7 years. Anything can be kept longer where the law requires it.
Zero data retention, a stricter arrangement Anthropic grants on request, is not in place for us. If that changes, this page will say so.

Your preview

Your app runs in a sandboxed frame on this site. Everything the frame loads to draw it, the open-source code that runs it, its typefaces and its sample photos, comes from this site, and the same goes for anyone who opens a link you shared. A file you download is different: when it is opened, its typefaces load from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), which sees the IP address of the browser that opened it, and its photos load from this site. It asks Google only for fonts, not for anything you typed.

Who helps us run this

Anthropic writes your app.
Vercel hosts the site and keeps its logs, stores shared links, and counts usage.
Neon runs our database, through Vercel.
Google Fonts serves the typefaces in a build you download.
Resend sends our email.
Stripe takes payment for a Launch Review.
Cal.com books calls.

We do not sell your information to anyone, or share it for advertising.

Deleting things

A shared link: delete it from the Build Room and it stops working at once (every open reads the stored copy, not a cached one). If you do nothing, it stops working on its own after 30 days.
A saved build: delete it from your list of builds in the Build Room. It leaves our database at once, with every version of it and any link shared from it.
Your builds in this browser: clear this site’s data in your browser settings. That removes the builds kept in this browser and the email we remembered for you. Builds saved to your account stay there until you delete them.
Your account: on the sign-in page, while signed in. Sign out to end the sign-in on that browser; it also takes your saved builds off that browser and ends its free session, so the next person to use it cannot open them. Sign out everywhere ends every sign-in at once. Delete your account and it is gone at once, no request needed: the address, its sign-ins, every saved build with all its versions, and the links shared from them. We email you one confirmation. Resend keeps its record of the emails it sent you for 30 days.
Our emails about your build: every one has an unsubscribe link and a one-click unsubscribe your email app can show. It works at once and stops all three.
What reached our inbox: a form you sent us, and the address and description from starting a build, are not part of your account. Ask through the contact page or at rgogerty16@gmail.com, and we will delete them and confirm within 5 business days.

Cookies and Do Not Track

We set two cookies: the usage-limit cookie above (g2_pass), and the sign-in cookie (g2_session) once you open a link, whose key is replaced each day it is used. Neither can be read by the page’s own scripts. We use no advertising cookies and do not track you across other websites, so a browser’s Do Not Track signal has nothing to switch off. Every visitor is treated the same way.

Children

This site and the Build Room are for people running or starting a business. They are not meant for children under 13, and we do not knowingly collect their information.

Changes, and questions

When we change what we collect, we update this page and the date at the top before the change goes live. Questions, or something you want deleted? Use the contact page. The rules for using the Build Room are in our terms.