Privacy Policy

At a glance

• Piezas is a product of Softmax AI Development Inc. in Vancouver, Canada.
• We use your account information to run Piezas, keep it secure and support you.
• The data your apps store belongs to you. We process it only to run your apps, never sell it and don't use it to train AI models.
• Our websites use Google Analytics cookies, only if you accept them.
• The Piezas plugin and command-line tool send no usage tracking.
• You can ask to see, correct or delete your information at any time.

1. Who we are

Piezas is a product of Softmax AI Development Inc., based in Vancouver, British Columbia, Canada (“Piezas”, “we”, “us” or “our”).

This policy applies to our websites (including piezas.ai), the Piezas admin console, the apps you build and host on Piezas, and the Piezas plugin and command-line tool (together, the “Services”). It explains what information we collect, how we use and share it, and the choices and rights you have.

Questions about this policy, or requests about your information, can be sent to support@piezas.ai.

2. Your information and your apps' information

Information about you as a Piezas customer. When you create an account, sign in, buy a plan, visit our websites or contact us, we decide how that information is used. For this information we are the “controller” (or the organization accountable for it, in Canadian terms).

Information your apps store on Piezas. The apps you build keep their records, documents, user accounts and files on Piezas. For this information you are the controller and we are your “processor” or “service provider”: we process it only on your instructions and only to run, secure and support your apps. You decide what your apps collect and are responsible for telling your own users how it is used and for having a lawful basis to collect it.

We do not sell the information your apps store, we do not use it for advertising, and we do not use it to train AI models. If you need a Data Processing Addendum for your use of Piezas, contact us at support@piezas.ai.

If you use an app that someone else built on Piezas, that app’s owner controls your information. Please contact them first; we will help them respond.

3. Information we collect

Information you give us

• Account details: your name, email address, organization name, your role, and the apps you create. Passwords are stored only as secure hashes, and multi-factor authentication is required.
• Billing details: when you buy a paid plan, your billing name, address and payment method. Payments are handled by Stripe; we do not store full card numbers.
• Communications: what you send us through contact and assessment forms, support requests, email and calls, and our replies.

Information collected as you use the Services

• Activity and security records: sign-ins, API requests, deployments, setting changes and errors, with the time, IP address and outcome. We keep these to run and secure the Services and so you can audit your account.
• Device and browser information: browser type, operating system, language and approximate location derived from your IP address.
• Website usage: pages visited, how you arrived and how long you stayed, collected through cookies if you accept them (see section 5).

Information from others

• When you connect an app to another service, such as Google or Stripe, we receive what that service shares to make the connection work, such as access tokens, which are encrypted.
• If a colleague invites you to their organization, we receive your email address from them.

4. How we use information

• To provide, operate and maintain the Services, including hosting your apps.
• To create and manage your account, and to process payments.
• To secure the Services: authenticate sign-ins, detect and prevent fraud, abuse and security incidents.
• To send service messages, such as sign-in codes, security alerts, billing notices and changes to the Services.
• To answer your questions and provide support.
• To understand how our websites are used and improve them, using analytics if you accept cookies.
• To meet legal obligations and enforce our terms.

If we want to send you marketing email, we will ask first where the law requires it, and every such email includes a way to unsubscribe.

Legal bases (EU and UK). Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (running your account and the Services); our legitimate interests (securing the Services, preventing abuse, supporting customers and improving the Services, balanced against your rights); your consent (analytics cookies and optional marketing, which you can withdraw at any time); and legal obligations (tax, accounting and lawful requests).

5. Cookies and analytics

Cookies are small files a website stores in your browser. We use:

• Necessary storage to keep you signed in to the admin console and remember your cookie choice. These are required for the Services to work.
• Analytics cookies from Google Analytics, to understand how our websites are used, such as which pages are visited and how people arrived. These are set only after you click “Accept” on our cookie banner.

You can change your choice at any time with Cookie settings, also linked at the bottom of every page. You can also block cookies in your browser settings or use Google’s opt-out add-on. Embedded videos use YouTube’s privacy-enhanced mode and set no tracking cookies until you press play.

6. AI features

Some Piezas capabilities use AI, such as answering questions from an app’s knowledge base. When an app uses one of these features, the content needed to produce the result (for example, the question and the relevant documents) is sent to our AI provider (today OpenAI), processed under its business API terms, and the result is returned to the app.

It is our practice not to use the information your apps store to train AI models, and we use these providers under terms that do not allow them to train their models on it.

7. The Piezas plugin and command-line tool

The Piezas plugin for Claude Code and Codex, and the piezas command-line tool, run on your own computer.

• Sign-in: your Piezas session is saved on your computer in ~/.piezas/credentials.json, readable only by your user account. Signing out removes it.
• Your app’s key: the tool reads your app’s Piezas key from your project’s settings file and sends it only to Piezas, to act on that app.
• Your code: files leave your computer only when you deploy, and only the built app is uploaded. Settings files such as .env are never uploaded. The safety checks that run while you build happen on your computer.
• No tracking: the plugin and the tool do not send usage analytics or telemetry.
• Your AI tool: conversations with Claude, Codex or another AI tool are handled by that tool’s provider under its own privacy policy.

8. Problem reports from your apps

Apps built on Piezas can include a “Report a problem” button. A report contains what the person wrote, the page address, window size, recent page errors and, if they choose, a screenshot of what they saw. Reports are stored in that app’s own data on Piezas, under the app owner’s control, as part of the app’s information described in section 2. The app owner can turn the button off at any deploy.

9. How we share information

We do not sell personal information. We share it only as follows:

• Service providers that process information for us under written agreements requiring them to protect it and use it only to provide their service (listed below).
• Services you connect: when you connect an app to another service, we exchange information with it as needed to provide that connection. That service’s own policy applies to what it receives.
• Within your organization: admins of your Piezas organization can see members, apps and activity records.
• Legal and safety reasons: when required by law or valid legal process, or to protect the rights, property and safety of our users, the public or Piezas.
• Business transfers: if Piezas or Softmax AI Development Inc. is involved in a merger, acquisition or sale of assets, information may be transferred under terms that protect it, and we will tell you before it becomes subject to a different policy.

We will update this list when we add or change providers.

10. Where information is stored and transferred

Piezas stores information on Amazon Web Services in the United States and Canada. Some of our providers process information in the United States. Information may therefore be transferred between Canada, the United States and other countries where our providers operate, and may be accessible to courts and authorities in those countries under their laws.

On an Enterprise plan, you can choose where your apps and their data are hosted, including on infrastructure you own or that we set up for you in a region you choose.

Where the law requires safeguards for international transfers, such as for information from the EU or UK, we use appropriate mechanisms such as the European Commission’s standard contractual clauses.

11. How long we keep information

We keep information only as long as we need it for the purposes in this policy:

• Account information while your account is open, and for a reasonable period afterward to handle questions, disputes and legal obligations.
• App data until you or your app delete it, or until your account is closed, after which it is deleted from our systems and, on a regular schedule, from backups.
• Security and activity records for as long as needed for security, fraud prevention and audit.
• Billing records for as long as tax and accounting laws require.

12. How we protect information

Each customer’s data is kept separate, multi-factor authentication is enforced, information is encrypted in transit, and secrets and connected-account tokens are encrypted at rest. Access by our staff is limited to what their work requires and is logged. Read more about security.

No system is perfectly secure. If a security incident affects your personal information, we will notify you and the relevant authorities as required by law.

13. Your choices and rights

You can view and update most account details in the admin console, change your cookie choice at any time, and unsubscribe from marketing email. Depending on where you live, you also have these rights:

• Canada (PIPEDA and British Columbia’s PIPA): to access the personal information we hold about you, to ask us to correct it, and to withdraw consent, subject to legal and contractual limits.
• European Union and United Kingdom (GDPR and UK GDPR): to access, correct, delete or receive a copy of your information, to restrict or object to how we use it, and to withdraw consent at any time without affecting earlier use.
• California (CCPA, as amended by the CPRA) and other US states with similar laws: to know what we collect and how we use and share it, to access, correct and delete it, and not to be treated differently for using these rights. We do not sell personal information. To opt out of analytics cookies, use Cookie settings.

How to make a request. Email support@piezas.ai from the address on your account and tell us what you would like. We may need to verify your identity before acting, and we will reply within the time the law requires. You may use an authorized agent where the law allows.

Complaints. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, or, in the EU or UK, your local data protection authority.

If you use an app built on Piezas, please send requests about that app’s information to its owner, as they control it.

14. Children

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

15. Changes to this policy

We may update this policy as the Services or the law change. We will post the new version here with a new effective date and, for significant changes, tell account holders by email or in the admin console before they take effect.

16. Contact us

Softmax AI Development Inc., Vancouver, British Columbia, Canada. Email support@piezas.ai.