Fabricate · Privacy & Data

Fabricate privacy & data

Read from Fabricate's own page on 2026-11-09. 26 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.

Role

value: controller
Fabricate ("we," "us," or "our") provides AI-assisted software generation tooling.
Read from Fabricate's own page on 2026-11-09

Data categories

category: identifying
Account data: name, email address, profile photo (from your authentication provider)
Read from Fabricate's own page on 2026-11-09
category: financial
Billing data: subscription tier, transaction history (payment card details are handled by Stripe and not stored by us)
Read from Fabricate's own page on 2026-11-09
category: device
Device data: device type, screen resolution, timezone
Read from Fabricate's own page on 2026-11-09
category: location
Log data: IP address, browser type, operating system, referring URLs, error logs
Read from Fabricate's own page on 2026-11-09
category: communication
Communications: support emails and feedback you send us
Read from Fabricate's own page on 2026-11-09

Purposes

purpose: Provide, operate, and improve the Service
Provide, operate, and improve the Service
Read from Fabricate's own page on 2026-11-09
purpose: Process payments and manage subscriptions
Process payments and manage subscriptions
Read from Fabricate's own page on 2026-11-09
purpose: Detect and prevent fraud and abuse
Detect, investigate, and prevent fraud, security incidents, and abuse
Read from Fabricate's own page on 2026-11-09

Retention

scope: Account dataperiod: 30 days
Retained for the lifetime of your account plus 30 days after deletion to enable account recovery.
Read from Fabricate's own page on 2026-11-09
scope: Billing recordsperiod: 7 years
Retained for 7 years to comply with financial and tax regulations
Read from Fabricate's own page on 2026-11-09
scope: Log dataperiod: 90 days
Retained for up to 90 days for security and debugging purposes.
Read from Fabricate's own page on 2026-11-09
scope: Analytics dataperiod: 2 years
Retained in aggregated or anonymized form for up to 2 years.
Read from Fabricate's own page on 2026-11-09
scope: Email logsperiod: 1 year
Retained for up to 1 year for deliverability and compliance verification.
Read from Fabricate's own page on 2026-11-09

Residency

region: United States
We are based in the United States.
Read from Fabricate's own page on 2026-11-09

International transfers

mechanism: SCC
Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to the USA
Read from Fabricate's own page on 2026-11-09
mechanism: DPF
The EU-U.S. Data Privacy Framework for vendors certified thereunder
Read from Fabricate's own page on 2026-11-09

Subprocessors

Vendor Purpose Location Stripe Payment processing and subscription management for Fabricate plans
Read from Fabricate's own page on 2026-11-09

Data processing agreement

Deletion

route: Account deletion or request via support@fabricate.build
You can also ask us to delete the data at support@fabricate.build .
Read from Fabricate's own page on 2026-11-09

Data subject rights

right: Access
Access and download your account data
Read from Fabricate's own page on 2026-11-09
right: Correct
Correct inaccurate information in your account
Read from Fabricate's own page on 2026-11-09
right: Delete
Delete your account and associated data
Read from Fabricate's own page on 2026-11-09
right: Erasure (GDPR)
Erasure: Request deletion of your data ("right to be forgotten")
Read from Fabricate's own page on 2026-11-09
right: Portability (GDPR)
Portability: Receive your data in a structured, machine-readable format
Read from Fabricate's own page on 2026-11-09
right: Objection (GDPR)
Objection: Object to processing based on legitimate interests
Read from Fabricate's own page on 2026-11-09

Sale or sharing

stance: prohibited
We do not sell your personal data.
Read from Fabricate's own page on 2026-11-09

Document

Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page