Privacy Policy

1. Who We Are

Kodevex is operated by [LEGAL ENTITY NAME], registered in [JURISDICTION] (“Kodevex”, “we”, “us”). We are the data controller for the personal data described in this policy. You can reach us at hello@kodevex.dev.

2. What We Collect

• Account data — your email address and authentication identifiers, plus your name and avatar if you sign in with Google or GitHub.
• Billing data — your subscription plan and status, and identifiers linking you to a payment record. We do not store your full card number; card details are handled by our payment providers.
• Service usage — the AI chat messages you send and receive, message counts used for plan limits, and basic technical logs (IP address, browser type, timestamps) used for security and debugging.
• Support data — the contents of emails you send us.

We do not knowingly collect data from children, and the Service is not directed at anyone under 18.

3. Why We Use It

We process your data to provide and operate the Service, to authenticate you and secure your account, to process payments and manage subscriptions, to enforce plan limits and prevent abuse, to respond to support requests, and to comply with legal obligations. We rely on contract performance, our legitimate interests in operating and securing the Service, and legal compliance as our lawful bases.

4. Third-Party Processors

We use the following providers to run the Service. Each processes data only as needed for its function, under its own privacy terms:

• Supabase — database, authentication, and file storage. Your account record, subscription state, and chat history are stored in Supabase (Postgres), protected by row-level security policies.
• Paddle and/or Creem — payment processing and merchant-of-record services. These providers receive your email, billing details, and card information to complete purchases and handle taxes. We receive only the resulting subscription and transaction records.
• OpenAI (or a compatible API provider, if configured) — the AI chat feature forwards the messages you send to a large language model to generate responses. Per the provider’s API terms, this data is not used to train their models. Do not submit confidential or sensitive information you are not comfortable sending to a third-party AI provider.
• Resend — used to deliver transactional email such as confirmations and receipts.
• Vercel — the hosting and CDN provider on which the Service runs, which processes request metadata and logs.

We may change providers over time. We will update this list when we do, and we require equivalent data-protection commitments from each processor.

5. AI Chat Data

Your chat messages are stored in your account so you can revisit your history, and are transmitted to the AI provider to produce each response. We use message counts to enforce daily plan limits. We do not use your chat content for advertising or to train our own models. You can request deletion of your conversation history as described in section 8.

6. Cookies and Local Storage

We use strictly necessary cookies to maintain your authentication session. We do not currently use advertising or third-party tracking cookies. If we add analytics that rely on cookies, we will update this policy and, where required, ask for your consent first.

7. Retention and Security

We keep your account and chat data for as long as your account is active. After you delete your account, we remove your personal data within 30 days, except where we must retain billing records longer to meet tax and accounting obligations. Data is encrypted in transit, and we apply row-level security so that one account cannot access another account’s records. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to lodge a complaint with your local supervisory authority. We do not sell your personal data. To exercise any of these rights, email hello@kodevex.dev and we will respond within 30 days.

9. International Transfers

Our providers may process your data in countries other than your own, including the United States. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

10. Changes and Contact

We may update this policy as the Service evolves; material changes will be announced by email or in-product notice. Questions? Email hello@kodevex.dev.