Privacy
Last updated: 19 October 2026. What we keep, why, and who helps us run MvpKit.
If you have an account
- Account: your email address and a scrambled (hashed) form of your password. We use the email to sign you in and to send account emails.
- Your projects: everything you write in MvpKit: help articles, settings, emails you set up.
- AI use: for each AI call we keep the feature, the size and the cost, to keep limits. The text itself is not stored in that log.
- Content checks: when our checks stop or mark a text, we keep a short excerpt (up to 300 characters) so we can review it.
If you visit a page hosted by MvpKit
Each help page belongs to a project owner. For what they do with your data, the owner is responsible; MvpKit stores it for them.
- Contact form: your email, your message and the page you sent it from. The project owner may also pass your account ID on their own site.
- Waitlist: your email. If the owner turned on a welcome email, we send it once.
- Ideas and votes: what you write. A vote is linked to a random ID in a cookie on your browser, not to your name.
- Visitor counts: pages viewed and the site you came from. Visitors are counted with a code made from your IP address and browser that changes every day, so we can't follow you from one day to the next.
- Spam protection: a scrambled form of your IP address, kept for about a day, to limit how many forms one address can send.
- Reports: what you write in "Report this page", and the page address.
Services that process data for us
- DigitalOcean: our servers and database.
- ZeptoMail (Zoho): sends account emails, contact alerts and waitlist welcome emails.
- Anthropic: runs our AI features (Claude). Only the text a feature needs is sent, for example the help articles and the visitor's question.
- OpenAI: its moderation service checks text for illegal or harmful content before it is published or sent to AI. Only the text to check is sent.
- Google Analytics: counts visits to mvpkit.net and hosted help pages.
We don't sell personal data and we don't use your content to train AI models.
How long we keep it
As long as the account or project exists. When an owner deletes a project, its messages, waitlist, ideas and articles are deleted with it. IP codes for spam protection are deleted after about a day.
Your rights
You can ask what we hold about you, ask us to correct it or delete it. If you wrote to a project through its contact form or joined its waitlist, you can also ask the project owner. Write to us.
See also the terms of use.