Privacy Policy

1. Information We Collect

We may collect:

• Account credentials and profile data (name, email address, avatar photo)
• Security and authentication metadata (Two-Factor Authentication / TOTP enrollment status and secrets)
• Organization and workspace collaboration data (team memberships, project assignments, roles, and invitation status)
• Geographic location data (Country, City, Pincode) detected via IP address for localization
• Billing information processed through third-party payment providers (Dodo Payments)
• Usage telemetry and tool execution metadata related to platform performance
• Technical data such as IP address, browser type, device information, and security audit events

2. Cookies and Tracking

We use cookies and similar technologies to maintain secure sessions and optimize your experience. Detailed information about the types of cookies we use, their purpose, and how you can control them can be found in our dedicated Cookie Policy.

3. How We Use Information

We use collected information to:

• Provide and maintain the Service, Developer REST APIs, and MCP Server
• Support multi-tenant organization workspaces, team invitations, and role-based access control
• Enforce security safeguards including Two-Factor Authentication (2FA) and edge rate-limiting
• Process payments, calculate regional taxes, and manage subscriptions
• Provide localized pricing and currency support
• Improve platform functionality and developer tools
• Communicate service updates, security notifications, and support messages
• Detect abuse, fraudulent activity, or security vulnerabilities

4. Payment Information

Payments are processed securely by third-party merchant of record providers such as Dodo Payments. We do not store any payment or card details on our servers.

5. User Content

Users retain ownership of any code or content submitted to the platform. We do not claim ownership of user-generated data or assets.

6. Data Retention & Erasure

We enforce a strict 30-Day Data Retention Policy for all user-generated tool execution history and organization audit logs under Pro and Teams subscriptions. Records exceeding 30 days are automatically filtered and permanently erased from client storage (IndexedDB) and cloud databases (Firestore). Free and anonymous sessions operate ephemerally with zero persistent history. Users may also request immediate full account deletion and personal data erasure at any time via their profile settings or by contacting our privacy team.

7. Third-Party Service Providers & Processing

We engage trusted third-party service providers to assist in delivering, securing, and operating our platform. These providers process information strictly on our behalf under contractual data protection terms and are categorized as follows:

• Cloud Infrastructure & Hosting: To securely store application data, manage user authentication, and ensure high availability.
• Payment & Billing Orchestration: To securely process subscriptions, calculate regional taxes, and prevent transaction fraud without storing raw card data on our servers.
• Edge Security & Abuse Mitigation: To enforce distributed rate limits, block malicious traffic, and protect the platform against denial-of-service attacks.

8. International Data Rights (GDPR/CCPA)

Depending on your jurisdiction, you possess the following rights:

• Access

  Request a copy of your stored data.

• Rectification

  Correct inaccurate personal information.

• Erasure

  Request the removal of your data.

• Portability

  Export your data in a machine-readable format.

9. Contact

For privacy-related questions or concerns, please contact us at: