Last updated: October 2026
This Privacy Policy explains how Vibe2Cloud, Inc. DBA Rethrow AI ("Rethrow," "we," "us," or "our") collects, uses, discloses, and safeguards information when you visit our website, create an account or workspace, or use our assessment, migration, and Rethrow Studio services (collectively, the "Services"). By using the Services, you agree to the practices described here.
1. Information We Collect
Information you provide
- Account and contact details such as your name, email address, company, and the contents of messages, support cases, or inquiries you send us.
- Workspace details such as your workspace name, the teammates you invite, their roles, and workspace settings like your preferred coding agent.
- Application and repository data you connect or provide so we can assess, migrate, or build your application, including the GitHub repository you connect and any app details you export from the platform you built it on.
- Coding agent API keys you add so your coding agent can run in Rethrow Studio. Keys are stored encrypted and are never shown again after you add them.
- App secrets you set through Studio. These are stored in your app’s own cloud account, not displayed back to you, and never written to logs, previews, or deployment records.
- Cloud connection details such as the cloud provider, organization and account identifiers, and regions you choose when you connect your cloud.
- Billing information, which is collected and processed by our payment processor, Stripe. We do not store your full card number.
Information collected automatically
- Usage and device data such as pages viewed, features used, approximate location derived from IP address, browser type, and timestamps.
- Service records such as assessments, migration plans, publish and deployment history, infrastructure plans, and rollbacks, kept so you can review and audit changes to your app.
- Cookies and similar technologies used to keep you signed in, remember preferences, and understand how the Services are used.
Information from third parties and your cloud
When you connect GitHub, a cloud provider (AWS, Google Cloud, or Microsoft Azure), a coding agent provider, or an authentication provider, we receive information from those services as you authorize (for example, repository metadata or account identifiers). To show you your app’s costs, resource inventory, architecture diagram, health, logs, and security findings, we read that information from your app’s cloud account.
2. How We Use Information
- Provide, operate, secure, and improve the Services, including free assessments, migrations, Rethrow Studio builds, live previews, publishing, and monitoring.
- Run the coding agent you choose on your behalf, using the API key you provide.
- Communicate with you about your account, workspace, support cases, setup calls, office hours, and product updates.
- Process payments for migrations and Studio subscriptions.
- Monitor for, prevent, and address fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our agreements.
3. How We Share Information
We do not sell your personal information. We share information only as needed to run the Services:
- Your coding agent provider. When your coding agent works on your app (for example Kiro, Claude Code, OpenAI Codex, Cursor, Factory Droid, or Google Gemini), your prompts and the relevant code are sent to that provider under your own API key and handled under that provider’s terms and privacy policy. If your app has AI features, those calls also use your provider key.
- Service providers that host our infrastructure, power Rethrow’s migration agents, process payments, send email, schedule calls, and provide analytics, under contracts that limit their use of the data.
- Cloud and code-host providers you direct us to work with on your behalf, such as GitHub and your cloud provider.
- Members of your workspace, who can see the apps, activity, and settings shared in that workspace according to their roles.
- Legal and safety disclosures when required by law or to protect rights, property, or safety.
- Business transfers in connection with a merger, acquisition, or sale of assets, subject to this Policy.
4. Your Application and Cloud Data
Rethrow migrates and builds applications onto cloud infrastructure that you own. Each app runs in its own dedicated cloud account inside your own cloud organization, and its code lives in your GitHub repository. Your cloud provider bills you directly for that usage.
We access your code and cloud resources only to deliver the Services you request. Access is limited to the narrowly scoped roles created by the Rethrow setup template you launch in your cloud organization, assumed with a unique external ID. Those roles cannot change your billing or payment settings, close accounts, or reach accounts outside the area created for Rethrow apps. Coding agents have read-only access to your app’s cloud account without access to secret values; changes to your cloud are made in code and applied through Publish. We never expose secret values; we reference credential containers by name only. You can remove Rethrow’s access at any time by deleting the Rethrow setup stack in your cloud account.
5. Data Retention
We retain information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Your apps, code, and app data stay in your cloud account and GitHub repository, so they are not deleted when you cancel Studio or close your Rethrow account. You may request deletion of your Rethrow account data as described below.
6. Security
We use technical and organizational measures designed to protect information, including encryption in transit, encrypted storage for API keys, least-privilege access, guardrail policies that limit app accounts to approved services, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your Rights and Choices
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at the address below. You can also remove a coding agent key or teammate from your workspace, remove Rethrow’s cloud access by deleting the setup stack, manage cookies through your browser settings, and unsubscribe from marketing email using the link in those messages.
8. International Users
We operate in the United States. If you access the Services from outside the U.S., you understand that your information may be transferred to and processed in the U.S., where data-protection laws may differ from those in your jurisdiction. Your app’s data is stored in the cloud region you choose for it.
9. Children's Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from them.
10. Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, provide additional notice.
11. Contact Us
Questions about this Policy or your information can be sent to support@rethrow.ai, or by mail to Vibe2Cloud, Inc. DBA Rethrow AI, Charleston Technology Center, 997 Morrison Drive, Suite 200, Charleston, SC 29403.

