This Privacy Policy explains how Code Fundi ("we", "us") collects, uses, discloses, and protects information when you use our websites, applications, APIs, and related services (the "Services").

1. Information we collect

We may collect:

  • Account data — such as name, email address, organization, and authentication identifiers when you register or sign in.
  • Usage data — such as device type, browser, IP address, approximate location, pages viewed, and diagnostic logs to operate and secure the Services.
  • Content you submit — such as repository metadata, prompts, search queries, and outputs you generate through the Services, including content processed by AI features.
  • Billing data — processed by our payment providers; we typically receive limited billing status, not full card numbers.

2. How we use information

We use information to:

  • Provide, maintain, and improve the Services;
  • Authenticate users and prevent fraud or abuse;
  • Communicate about updates, security, and support;
  • Analyze usage in aggregate to improve product performance and reliability;
  • Comply with legal obligations and enforce our terms.

3. AI and automated processing

Certain features use machine learning models hosted by us or subprocessors. Inputs and outputs may be processed to deliver the feature and to improve safety and quality, consistent with your settings and applicable law.

4. Legal bases (EEA/UK)

Where GDPR applies, we rely on appropriate bases such as contract (to provide the Services), legitimate interests (security and product improvement, balanced against your rights), consent where required, and legal obligation.

5. Sharing and subprocessors

We may share information with vendors that help us operate the Services (for example hosting, analytics, email, payments, and model providers). They are bound by contractual obligations to protect data and use it only for the purposes we specify.

6. Retention

We retain information for as long as needed to provide the Services, comply with law, resolve disputes, and enforce agreements. Retention periods may vary by data category.

7. Security

We implement technical and organizational measures designed to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. International transfers

We may process information in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You may withdraw consent where processing is consent-based. To exercise rights, contact us as described below. You may also lodge a complaint with a supervisory authority.

10. Children

The Services are not directed to children under the age where parental consent is required. We do not knowingly collect personal information from such children.

11. Cookies and similar technologies

We use cookies and similar technologies for authentication, preferences, analytics, and security. You can control cookies through your browser settings; some features may not work without them.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and adjust the effective date. Material changes may require additional notice as required by law.

13. Contact

For privacy requests or questions, reach us via our contact page.