Your work, your data.

Twofold is an early-access website and web app builder.

Your account

Clerk manages sign-in with Google, Microsoft, Apple, or a one-time email code. Clerk processes your account details and session cookies. Twofold uses your Clerk user ID to authenticate generation requests. Provider credentials and session verification stay on the server.

Saved on this device

Projects, source code, versions, and preview data are stored in this browser, separated by signed-in account. Work created before signing in remains in the guest workspace. They do not sync between devices. Clearing browser storage removes them, so export work you want to keep.

AI requests

When you generate or edit a project, your prompt, attached reference files, and relevant project code are sent through Twofold’s server to Z.ai. Files are sent only when you build. Attachment names and sizes are saved with the version in this browser; original files are not saved by Twofold. Reattach a file to use it in another build. The project API key is stored as a server secret and is never sent to your browser or included in exports. You do not need to supply a personal API key. Generation requests require sign-in. We store your Clerk user ID, generation attempt timestamps, selected model, outcome, and token counts when available to enforce usage limits. Your prompts and generated source and attachments are not stored in that usage ledger.

Generated previews

Previews run in isolated frames. Interactions may save project data in this browser. Exported HTML runs independently; review generated code before hosting it or using it with real customer data.

Stock photography

When a generated design uses stock photography, short image search phrases are sent through Twofold’s server to Pexels. The Pexels API key stays on the server. Photos load from Pexels in previews and exported pages, and include photographer credits. These photos require an internet connection.

Hosting

This preview is hosted through Cloudflare Workers. Cloudflare and AI providers process requests under their own policies. Z.ai’s privacy policy is available at Z.ai privacy policy.

Support

When you open the support widget, Help Scout processes the information you submit and the device information needed to provide support. When secure identification is configured, we share your verified account email and name to identify your support conversations. The widget loads only when you choose Contact support. Please avoid sending passwords, verification codes, API keys, or confidential project files.