Last updated October 6, 2026.
Your name, email address and organization, and how you sign in: a password held by our sign-in provider, or your Google or GitHub account. What you create in your workspace: diagrams, deployments and their settings, and requests from coding agents you connect. Billing records from Stripe, which keeps your card details; we never see them. How much Archie is used, but not what you say to it.
ArchFoundry reads an AWS account through a read-only role you create, to show you what runs there and what it costs. That role sees what resources exist, not what is stored in them: no secret values, files or database contents. ArchFoundry changes your account only through a separate deploy role you grant, after someone in your organization approves. We never hold your AWS access keys.
ArchFoundry keeps a record of each deployment, including its Terraform configuration and state, so it can update and remove what it built. The state is kept encrypted in ArchFoundry's AWS account. Database passwords and the values of secrets are not written to either.
When you ask Archie for something, your message, any files you attach and a summary of your diagram (names, types, prices, connections and network layout) go to the AI provider: Anthropic, or the provider your organization chose in Settings, whose terms then apply. Requests from coding agents go the same way. Terraform state, credentials and secret values are never sent. ArchFoundry does not train models on your data.
Supabase (database and sign-in), Amazon Web Services (hosting), Anthropic (Archie), Stripe (billing), GitHub (only if you connect a repository) and Cloudflare (this website). We use no analytics or advertising trackers, and one cookie, to keep you signed in.
Data is encrypted in transit and at rest. Credentials you give us, such as repository tokens and AI keys, are encrypted before they are stored, and each organization's data is kept separate from every other's.
Plan and apply logs are deleted once they are more than four hours old. Everything else is kept while your workspace exists. You can remove connections, repositories and AI keys in Settings at any time. To get a copy of your data, correct it, or have your account deleted, write to legal@archfoundry.ai.
Questions about any of this: create an account and ask us, or write to legal@archfoundry.ai.