PretzelGraph

Privacy Policy

Effective date: 30 September 2026

PretzelGraph is free to self-host today. Cloud hosting is not open yet, so this policy covers the little personal data we handle until it does. It is written to meet the EU General Data Protection Regulation (GDPR).

Who is responsible: Roland Teslaru, a private individual in Romania, is the data controller. Contact: hello@pretzelgraph.ai.

1. What we collect

  • Waitlist. If you join the cloud hosting waitlist on pretzelgraph.ai, we keep your email address and when you joined.
  • Technical logs. When you visit pretzelgraph.ai or use our API, our hosting providers record your IP address, browser information, the pages or endpoints requested, and timestamps.
  • Self-hosted installations. A self-hosted PretzelGraph fetches the official node library from api.pretzelgraph.ai. That request shows us the installation's IP address and the version it runs, and appears in the technical logs above. Nothing else about the installation, its users, or its workflows is sent to us. Setting PRETZEL_CLOUD_URL to an empty value turns the request off.
  • Early accounts. A small number of accounts were created on portal.pretzelgraph.ai before cloud hosting was paused. We keep their email address, username, display name, and workspaces.

We do not run advertising, tracking, or analytics, and we do not sell personal data.

2. Why, and on what legal basis

  • Emailing you when cloud hosting opens: your consent (GDPR Art. 6(1)(a)). We send one thank-you email when you join, and one more when cloud hosting opens.
  • Keeping the site and API running and secure: our legitimate interest (Art. 6(1)(f)).
  • Operating early accounts: the contract you entered by signing up (Art. 6(1)(b)).

3. Who processes it for us

  • Resend sends the waitlist emails.
  • Cloudflare serves pretzelgraph.ai and its DNS.
  • Fly.io runs our API.
  • Neon hosts the database that stores the waitlist and early accounts.

Some of these providers are based in, or store data in, the United States. Transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses, as each provider offers.

4. How long we keep it

  • Waitlist email address: until we have told you cloud hosting is open, or until you ask us to remove it, whichever comes first.
  • Technical logs: up to 30 days.
  • Early accounts: until you delete the account.

5. Your rights

You can ask to see, correct, or delete your data, object to how we use it, or withdraw your consent at any time. Replying to our email or writing to hello@pretzelgraph.ai is enough. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).

6. Changes

When cloud hosting opens, this policy will be replaced by a full one covering the hosted service. We will note the change on this page.