Privacy Policy

1. What we collect

Account data: email address, display name, hashed password, session metadata (hashed IP address, user agent).
Billing data: subscription identifiers and status from PayPal. We never see or store your card or bank details.
Engineering data: repositories you connect, repository intelligence (file paths, symbols, imports, summaries), mission objectives, task graphs, event streams, diffs, tool-call metadata, evaluation results and project memory.
Integration credentials: GitLab and deployment tokens, encrypted at rest.

2. How we use it

To operate the Service: authenticate you, bill your subscription, run missions on your behalf, enforce plan limits, keep audit logs, and improve reliability. Model providers receive the mission context required to perform engineering work; we do not use your code to train models.

3. Secrets

Tool output is masked for credential-looking values before it is stored or displayed. Mission workspaces never receive the platform’s own secrets. Integration tokens are encrypted with a key derived from the platform secret and decrypted only for the duration of a request or Git operation.

4. Retention and deletion

Engineering data is retained while your account is active. You can archive projects and invalidate memory at any time. On account deletion, we delete account, engineering and integration data within 30 days, except billing records required by law.

5. Sharing

We share data only with processors necessary to run the Service (hosting, database, model providers, PayPal, email delivery) and when required by law. We do not sell personal data.

6. Security

HTTP-only, same-site session cookies with rotation; scrypt password hashing; server-side authorization on every protected resource; rate limiting; webhook signature verification; strict tenant isolation; audit logging.

7. Your rights

You may access, correct, export or delete your personal data by contacting privacy@aicloudcode.com. Residents of the EU/EEA, UK and California have additional rights under applicable law.

8. Changes

We will announce material changes to this policy through the Service before they take effect.