Privacy Policy

AiBlocks is a marketplace for reusable AI components. Running it means handling some personal data — account details, purchase records, seller payout information — and this page covers all of it. It applies to buyers, sellers, and anyone browsing the public site.

Account data (via Clerk): email address, name, profile image, and basic profile info from whichever sign-in method you use (Google, Microsoft, Facebook, GitHub, or email/password).

Seller data: display name, bio, and links you add to your public seller profile; Stripe Connect onboarding status (identity verification and payout details are collected and held by Stripe directly — AiBlocks does not see or store your bank details).

Transaction data: which components you've purchased or published, purchase amounts and timestamps, download history, stars, and any reviews or comments you post.

Content you upload: component zip files and markdown READMEs you publish as a seller.

Technical data: standard server logs (IP address, timestamps, request metadata) collected automatically by our hosting provider (Vercel) for operating and securing the site.

• To create and secure your account, and let you sign in
• To process purchases and route seller payouts via Stripe Connect
• To display your public seller profile and published components
• To gate paid downloads to buyers who've actually paid
• To respond to support requests and enforce the Terms of Service
• To meet legal obligations (e.g., tax and financial record-keeping)

We do not sell your personal data, and we do not use it for advertising.

For users in the EU/EEA, we rely on one of these legal bases for each use of data above:

• Contract — processing needed to create your account, complete a purchase, or pay out a seller.
• Legal obligation — record-keeping required by tax and financial law.
• Legitimate interest — securing the platform against fraud and abuse, and operating core site functionality.
• Consent — anything optional we might add later (e.g., marketing emails), which you'd be asked separately to opt into.

We share data with the vendors ("subprocessors") that run the platform, only as needed for them to provide their service to us — not for their own independent use:

• Clerk — authentication and account management.
• Supabase — database and file storage (component zips, metadata).
• Stripe (Stripe Connect) — payment processing, seller identity verification (KYC), and payouts. Stripe holds your payment and banking details directly; we never see full card numbers.
• Vercel — application hosting and server logs.

Your public seller profile (name, bio, links, published components, stats) is visible to anyone who visits AiBlocks — that visibility is the point of a public profile, not a data-sharing side effect. We don't otherwise share your data with other users beyond what a purchase itself reveals (e.g., a seller can see that a sale happened, via Stripe).

Clerk, Supabase, Stripe, and Vercel may process data outside your country, including in the United States. Where that applies to EU/EEA data, transfers should be covered by each vendor's Standard Contractual Clauses (SCCs) or equivalent safeguard — this needs to be confirmed against each vendor's current Data Processing Agreement (DPA) and listed here specifically, rather than assumed.

• Account data is kept while your account is active, and deleted or anonymized within a reasonable period after you delete your account, except where we're legally required to keep it longer.
• Transaction and payment records (purchases, Stripe payment data) are retained for 8 years under German tax law (GoBD / Abgabenordnung §147), reduced from 10 years by the Bürokratieentlastungsgesetz IV effective for periods starting after December 31, 2024. The period runs from the end of the calendar year the record was created — e.g., a purchase from 2026 is retained through December 31, 2034.
• Annual financial statements and bookkeeping records: 10 years.
• Business correspondence tied to a specific transaction: 6 years.
• A published component's files are retained while it's live on the marketplace, and for a reasonable period after unpublishing to support buyers' re-downloads of what they already purchased.

If you're in the EU/EEA (or a jurisdiction with similar protections), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion ("right to be forgotten"), subject to our legal retention obligations above
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, where consent is the basis for processing
• Lodge a complaint with your local data protection supervisory authority

To exercise any of these, contact us via Section 14.

AiBlocks currently uses only the essential session cookies set by Clerk to keep you signed in — nothing else is required for the site to function. We don't currently run analytics or advertising trackers. If that changes (e.g., adding product analytics), we'll update this policy and, where required, ask for consent first.

AiBlocks isn't directed at children, and per our Terms you must be at least 18 (or the age of majority where you live) to create an account. We don't knowingly collect data from children.

We use reasonable technical and organizational measures to protect your data — access controls on our database, encrypted connections, and relying on Clerk/Stripe for the most sensitive data (auth credentials, payment details) rather than handling it ourselves. No system is 100% secure, and we can't guarantee absolute security. This section covers your account and platform data — for the separate risk of running third-party components you download (which is a security topic, not a privacy one), see Terms Section 8.

If a breach affecting your personal data occurs, we'll notify affected users and, where legally required, the relevant supervisory authority, within the timeframe required by applicable law (for GDPR, generally without undue delay).

We may update this Privacy Policy as the platform evolves. Material changes will be announced with reasonable notice. Continuing to use AiBlocks after changes take effect means you accept the updated policy.

The data controller for AiBlocks is RheinWeg. For privacy questions or to exercise the rights in Section 8: contact us here.