CastanStart free

AI that builds and runs your company: what you own when you leave

By Tudor Bungardean. Published 13 October 2026. Every outside fact read on 13 October 2026.

When you leave an AI that built or ran your company, what you keep is decided by four clauses in its terms: whether you can clone the code, in what form the data comes out, whose name the domain is in, and what happens to the site the day the subscription lapses. We read those clauses, and the one on training, on the public pages of seven products on 13 October 2026. The short version: the code-first tools sync to your GitHub and let you clone; the company builders hand you an archive, or a CSV, or nothing in particular; a domain bought through a builder is registered in the builder’s name first or locked for sixty days to three months; the site goes dark when you stop paying at the one builder that says what happens; and four of the seven take a licence to train on what you type in, two of them with no opt-out on the page. Castan wrote this and is on the list; every claim links to the page it was read on.

Seven products, four clauses and the training one

Read on 13 October 2026 from each vendor’s terms, privacy policy and help centre; “not stated” means the pages we read do not say
The codeThe dataA domain bought through themThe site when you stop payingTrains on your inputs
PolsiaA zip from the dashboard; “no git clone URL or API to hand out”; archives over 1 GB through supportThe database as two SQL files for any PostgreSQL, one export every fifteen minutes, the link alive for 24 hours; reports, chat and task lists have no exportRegistered in Polsia’s name first, transferable to you after 60 days through support; one year, non-refundableThe company is paused and the site taken offline until you resubscribe; data keptYes: an irrevocable licence while your inputs are stored, “to train and improve the AI models and workflows”; no opt-out on the page
MarblismNo code productA full export on demand, format not stated; content deleted within 30 days of cancellingBring your own; buying one is not statedWorkspace deactivated at once, content deleted within 30 daysNo: “never used to train Marblism models - or any third-party model”
DurableNo code product; no site export page existsCustomers as a CSV; the site’s content: not statedTransfer out only after three consecutive months of paid subscription in good standing, by EPP code through support; registrant not statedAccess to the end of the billing period; after that not statedYes: an irrevocable, sublicensable licence over Customer Data to “improve and enhance” the service; “to train machine learning models” in the privacy policy; no opt-out on the page
CoFounder.AINot stated“Export your data in a portable format”; deleted or anonymised within 30 days of closing the accountNot statedNot statedNot on third-party foundation models; aggregated, de-identified use to improve its own prompts and pipelines
LovableTwo-way GitHub sync on every plan; clone and keep working in your editorPersonal data in a portable format; project data beyond the repository not statedNot researchedYour right to access ends; the hosted site’s fate not statedYes, with an opt-out in settings on any plan, applied to content after you opt out
BoltA zip that runs with npm install, and GitHub sync both ways, checked every 30 seconds; publish on Bolt, Netlify or anywhereDeleting a project removes chat, files and database; a 30-day retrieval window if Bolt ends your access other than for causeLocked for 60 days, movable into your own Name.com account in that window, elsewhere afterCancelling is downgrading to Free; sites already published on your own domains stay onlineYes, with an opt-out; only content created from 7 October 2026; the terms also license datasets to third parties “for compensation”; not applied to Teams or Enterprise workspaces
CastanPull requests into your own GitHub repository, which you mergeRead from your own Gmail, Slack, calendar, Stripe and GitHub, where it stays; removing a connection deletes the copy at once; the whole workspace deleted on request within 30 days, backups includedBought by you at any registrar and pointed at the page with two DNS records; the registrant is you from the first dayThe workspace continues on the free plan; the website is a repository of yours and publishes on GitHub Pages, Vercel or Castan hostingNo: never used to train models for other customers; AI providers under agreements that prohibit training

The code

Polsia’s terms are generous on paper and plain in the help centre. Section 1.H says the cloud resources it creates for you, GitHub repositories, Neon databases, Render services, are provisioned under Polsia’s accounts and that “you retain ownership of the source code and data within those resources”. The help centre says what ownership gets you today: “You can download a copy of your app’s code anytime from the dashboard”, and “We don’t offer direct collaborator access to your GitHub repo right now. There’s no git clone URL or API to hand out.” A project whose archive would pass 1 GB cannot be exported automatically. The app’s own code carries the string “GitHub export is only for paying users”, which no help page explains.

The two tools built for code behave like code tools. Lovable creates a GitHub repository when you connect one, syncs both ways on every plan, and tells you to clone it and continue in your editor. Bolt downloads a zip that runs with npm install, syncs with a GitHub repository and checks it every thirty seconds for commits made elsewhere, and publishes to its own hosting, to Netlify “or another service you choose”. Durable and Marblism are not code products, and CoFounder.AI’s pages do not say. Castan writes software as pull requests into a repository you own, through a GitHub App you can uninstall; leaving is closing the app, and the history stays in your git log.

The data

Ask for the format. Polsia exports the database as “a zip of two SQL files” that loads into any PostgreSQL, one export every fifteen minutes, the link alive for a day; the dashboard itself, “reports, metrics, chat history, task lists”, has no export, and only permanent account deletion emails you a standard account-data export with optional backups of the code and the database. Durable exports your customers as a CSV and promises personal data “in a commonly used electronic format”; nothing on its pages says how the website’s content leaves. Marblism’s trust centre says “a full export is available on demand” and that content is deleted within 30 days of cancelling, without naming a format. CoFounder.AI says “export your data in a portable format” and deletes or anonymises within 30 days. Bolt is the one that writes down what deleting a project destroys: “your chat history, project files, and database.”

Castan’s answer is that the data never moved. It reads your mail, your Slack, your calendar, your payments and your repositories where they are and keeps an index; removing a connection deletes what that connection brought, at once; and a request from the owner’s address deletes the whole workspace within 30 days, backups included. There is nothing to export because there was nothing to surrender.

The domain

Whose name is on the registration is the clause people read last and regret first. Polsia’s help centre says of a domain bought through it: “we register it under Polsia’s name at first so your site goes live right away”, transferable into your name after 60 days by asking support; the registration is for a year and is not refundable; its refund page, on the same day, calls the same domain “a real one-year registration in your name”. Durable will release a domain bought through it only after “at least three consecutive months” of active subscription, with the account in good standing, by EPP code through support; the registrant is not named on any page we read. Bolt locks a bought domain for 60 days and lets you move it into your own account at its registrar inside that window. The cleanest answer is to buy the domain yourself. Polsia and Castan both say so in their own way: Polsia, “you keep managing your domain at your registrar”, and Castan, which sells no domains, shows two DNS records to add at whichever registrar you chose.

The site, the day you stop paying

Polsia is the only builder that says it in one sentence: “If your subscription lapsed, Polsia pauses the company and takes its site offline to save resources.” Its terms add that subdomains can be removed “at any time, and for any reason”, and that after a termination by Polsia the infrastructure stays for 30 days and “may be permanently deleted” after. Durable gives access to the end of the billing period and says nothing about the day after; deleting the business removes “your business profile, website, Customers, assets, and subscriptions”. Marblism deactivates the workspace at once and deletes content within 30 days. Bolt, because the code lives in your repository, lets sites already published on your own domains stay online after you drop to Free. A Castan website is a repository of yours, published on GitHub Pages, Vercel or Castan hosting; the free plan continues after a cancellation, and the repository is yours whatever plan you are on.

Who trains on what you type in

Four of the seven take a training licence. Polsia’s section 5.B grants a licence “to train and improve the AI models and workflows we use to power the Services”, “royalty free, transferable, sub-licensable, worldwide and irrevocable (for so long as Your Input are stored with us)”; the only opt-outs in its terms and privacy notice are for marketing email and arbitration. Durable’s section 4(a) is an irrevocable, sublicensable licence over Customer Data to “improve and enhance the Durable SaaS Services and its other offerings”, and its privacy policy lists “to train machine learning models” as a purpose; no opt-out appears. Lovable trains on Customer Content and offers an opt-out in settings on any plan, which “does not retract content from training datasets assembled, or models trained, before you opted out”. Bolt’s terms, effective for existing accounts from 7 October 2026, license training and also “datasets derived from Bolt Model Development Content” to third parties “including for compensation (which some laws may characterize as a ‘sale’)”, with an opt-out, only for content created from that date, and not for Teams or Enterprise workspaces. Marblism says the opposite in a heading: “Your data never trains a model.” CoFounder.AI says it does not use your private content to train third-party foundation models and uses aggregated, de-identified data on its own prompts. Castan’s terms: never sold, never used to train models for other customers, and its AI providers are under agreements that prohibit training, on zero-retention endpoints where offered.

Refunds

  • Polsia: none, “across the board: subscription payments, credits, historical God Mode charges, domains, and ad spend”; access to the end of the paid period.
  • Durable: “fees are non-cancelable and non-refundable”; a refund is a support conversation about an error.
  • Marblism: a seven-day money-back guarantee on a new subscription; its pricing page prints both “7-day” and “77-day”, and the terms say seven.
  • Lovable, Bolt and CoFounder.AI: non-refundable except where the law requires; cancellation stops the next renewal.
  • Castan: no minimum term, cancel any time from Billing; a consumer in the EU keeps the 14-day right of withdrawal with a refund for the days not used, and the workspace continues on the free plan.

The legal floor is lower than people assume

The right to data portability in the GDPR, Article 20, gives a person the personal data they provided to a controller, “in a structured, commonly used and machine-readable format”, where the processing rests on consent or a contract. The UK regulator spells out the edges: it “only applies to personal data”, it does not include “any additional data that you have created based on the data an individual has provided to you”, and Recital 14 of the regulation says it does not cover data about legal persons. A company’s task lists, metrics, generated site, agent logs and chat history are not the owner’s personal data in that sense. Their portability rests on the vendor’s terms, which is why the table above is about the terms.

How to read the terms before you build on them

  • Search the help centre for “git” and “clone”. A download is not a repository.
  • Search for “export” and read the format and the limits: one every fifteen minutes with a 24-hour link is a different promise from a repository you already hold.
  • Search for “registrar” and “transfer”. If the domain is bought through the vendor, find whose name is on it on day one and the earliest day it can leave.
  • Search for “lapse”, “pause” and “offline”. The best pages say what happens the day after the last payment in one sentence; silence is a no.
  • Read the licence clause for the word “train” and then for “opt”. Irrevocable with no opt-out means the inputs are theirs for as long as you store them there.
  • If the answer is not on the page, the answer is no until support writes otherwise, and then it is an email, not a term.

Where Castan stands

Castan is an AI that builds and runs a company with its owner, who owns everything it makes, and the sentence is the product. The code is pull requests into your repository. The data is read from your own accounts and the copy is deleted when you say so. The website lives in your repository and your domain at your registrar. The workspace runs in the European Union, under terms that say the data is never sold and never used to train models for anyone else. Nothing reaches a customer without a person approving it. Cancel from Billing and the free plan continues; write from the owner’s address and the workspace is gone within 30 days, backups included.

Castan wrote this and is on the list. Every clause above carries the day it was read and links to the page; terms change, and if one has moved since 13 October 2026, write to hello@castan.ai and the page is corrected with the date of the change.

Questions people ask

Can I export my code from Polsia?

As a zip from the dashboard, with the database as two SQL files for any PostgreSQL. There is no git access: the help centre says “there’s no git clone URL or API to hand out”, and archives over 1 GB go through support. The reports, chat history and task lists in the dashboard have no export, as read on 13 October 2026.

Who owns a domain bought through Polsia or Durable?

Polsia registers it under its own name at first and transfers it to you after 60 days through support; the registration is for a year and is not refunded. Durable releases a domain bought through it only after three consecutive months of active subscription, by EPP code through support, and its pages do not name the registrant. Buying the domain yourself at a registrar avoids both.

What happens to my site when I stop paying an AI builder?

Polsia pauses the company and takes the site offline until you resubscribe. Durable keeps access to the end of the billing period and does not say what follows. Marblism deletes content within 30 days. Bolt leaves sites already published on your own domains online because the code is in your repository.

Which AI company builders train on my data?

Polsia and Durable take irrevocable licences that include training, with no opt-out on their pages. Lovable and Bolt train with an opt-out in settings; Bolt’s terms also allow licensing datasets to third parties. Marblism and CoFounder.AI say they do not train on your content. Castan never uses workspace data to train models for other customers.

Does GDPR give me the right to take my company’s data out of an AI platform?

Article 20 covers the personal data a person provided, in a machine-readable format. It does not cover data the vendor created from it or data about a company as a legal person, so a company’s tasks, metrics, generated site and logs are portable only if the vendor’s terms say so.

Sources

Prices and terms at other companies change over time. Every figure on this page carries the day it was read, and the page it was read on is linked above. If one has moved since, write to hello@castan.ai and the page is corrected.

Also on the blog