Privacy Policy

Last updated: February 2026

1. Information We Collect

We collect the following categories of data:

  • Account data: Email address, name, and profile picture from your OAuth provider (Google or GitHub)
  • Conversation data: Chat messages and AI responses stored for your session history
  • Generated artifacts: Code and configurations you generate through the Service
  • Integration tokens: Encrypted API tokens for connected third-party services
  • Usage data: Feature usage, error logs, and performance metrics

2. How We Use Your Data

  • Provide and improve the Service
  • Authenticate your identity and manage sessions
  • Connect to third-party services on your behalf
  • Monitor for abuse and enforce usage limits
  • Send service-related notifications

3. Data Storage & Security

Your data is stored in a secure database with row-level security policies. Integration tokens are encrypted at rest using AES-256. All data is transmitted over HTTPS. We do not sell your data to third parties.

4. Third-Party Services

We use third-party services for the following purposes:

  • Database and authentication providers
  • Cloud hosting and infrastructure
  • AI model providers for intelligent features
  • Error monitoring and performance analytics
  • Payment processing (if applicable)

5. Your Rights (GDPR / CCPA)

You have the right to:

  • Access: Export all your data via the account settings
  • Rectification: Update your profile information
  • Erasure: Delete your account and all associated data
  • Portability: Download your data in JSON format
  • Restriction: Request limitation of processing

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. Anonymized usage statistics may be retained for analytics purposes.

7. Cookies

We use httpOnly cookies for authentication (access token, refresh token) and a non-httpOnly cookie for client-side user context. We do not use tracking cookies or third-party advertising cookies.

8. Contact

For privacy-related inquiries, data export requests, or account deletion requests, please contact us through the application's support channels.