Legal

Privacy Policy

Last updated: April 5, 2026

1. Who we are

wee.cat ("Wee", "we", "us") is operated from Barcelona, Catalunya, Spain. We provide hosted cloud sandboxes for AI-assisted software development. For questions about this policy, contact us at info@wee.cat.

2. Data we collect

Account data

When you create an account, we collect your email address, username, and a hashed version of your password. We never store passwords in plain text.

Billing data

Payments are processed by our third-party payment processor. We do not store your credit card number, CVV, or full card details. We retain transaction identifiers, plan type, and billing status to manage your subscription.

Pod metadata

We collect metadata about your sandbox usage, including creation timestamps, resource consumption metrics (CPU, memory, storage), and session durations. This data is used for billing, capacity planning, and abuse prevention.

Server logs

Our servers automatically log IP addresses, user agent strings, request URLs, and access timestamps. These logs are used for security monitoring, debugging, and abuse prevention.

Cookies

We use a single session authentication cookie to keep you logged in. We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

3. Data we do not collect

We do not collect or monitor the contents of files inside your sandboxes during normal operation. We do not log Claude conversation content, keystrokes, or screen activity. Content inside sandboxes may only be inspected when investigating a suspected violation of our Acceptable Use Policy.

4. How we use your data

  • Provide and maintain your account and sandboxes
  • Process payments and manage subscriptions
  • Monitor platform security and prevent abuse
  • Communicate service updates, billing notices, and security alerts
  • Comply with legal obligations

5. Legal basis for processing (GDPR)

We process your personal data under the following legal bases:

  • Contract performance (Art. 6(1)(b) GDPR): Account and billing data necessary to provide the service you signed up for.
  • Legitimate interest (Art. 6(1)(f) GDPR): Server logs and security monitoring to protect our platform and users.
  • Legal obligation (Art. 6(1)(c) GDPR): Retaining billing records as required by Spanish tax law and cooperating with law enforcement when legally required.

6. Data retention

  • Account data: Retained for the duration of your account plus 30 days after deletion.
  • Billing records: Retained for 5 years as required by Spanish tax law.
  • Server logs: Retained on a 90-day rolling basis, then permanently deleted.
  • Pod data: Deleted when you destroy the sandbox. Upon account termination, all pod data is deleted within 7 days.

7. Third-party processors

We share data with the following categories of third-party processors:

  • Payment processor: To handle subscription billing and payment verification.
  • Cloud infrastructure provider: To host and operate sandbox environments.

All processors are contractually bound to process data only on our instructions and in compliance with GDPR.

8. Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Port your data to another service
  • Restrict processing of your data
  • Object to processing based on legitimate interest

To exercise any of these rights, email info@wee.cat. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Espanola de Proteccion de Datos, AEPD) at www.aepd.es.

9. Data security

We protect your data with TLS encryption in transit, hashed passwords, restricted database access, and regular security reviews. No system is 100% secure, and we cannot guarantee absolute security, but we take commercially reasonable measures to protect your information.

10. International transfers

Your data is processed within the European Economic Area (EEA). If any data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children

wee.cat is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have collected data from a minor, we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 30 days before they take effect. Your continued use of the service after the effective date constitutes acceptance of the updated policy.

13. Contact

For questions or requests regarding this Privacy Policy, contact us at:
info@wee.cat