Privacy Policy

1. Information We Collect

We may collect a variety of information from or about you or your devices from various sources, as described below.

If you do not provide your information when requested, you may not be able to use some or all of our Services if that information is necessary to provide you with our Services or if we are legally required to collect it.

1.1 Information You Provide to Us

• Registration and Profile Information: When you register for an account, we ask you for your full name, email address, and a password. If you sign up using a third-party Single Sign-On (SSO) service like Google, we will also receive information from those services such as your name, email address, and profile photo, in accordance with your privacy settings on those third-party services.
• Payment Information: When you add a credit card or payment method to your account, a third-party service provider (Stripe) that handles payments on our behalf will receive and process your payment card information securely. We do not store credit card numbers on our servers, we only store a billing token.
• User Content: As part of our Services, you may upload or generate content, including prompts, environment variables, images, videos, fonts, and other digital assets.
• Communications: When you communicate with us, we may receive additional information about you. For example, when you communicate with our Customer Support Team (support@icod.ai), we will receive your name, email address, the contents of a message or attachments that you may send to us, and other information you choose to provide.
• Careers: If you apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience.

1.2 Information We Collect Automatically When You Use Our Services

When you use the Services, we use a variety of electronic tools, such as cookies, pixel tags, and similar technologies (collectively referred to in this Privacy Policy as “cookies”) to automatically generate information about how you use and interact with the Services as discussed in this section.

What are Cookies? Cookies are small files of letters and numbers that we store on your browser or the hard drive of your computer, or small graphic images placed on web pages or in emails. They can be stored either for a single browser session or more permanently. We use cookies to collect information about your browsing activities, distinguish you from other users, provide functionality, and analyze use of the Services. The types of cookies we and third parties may use to collect information are as follows:

• Strictly necessary cookies: Some cookies are strictly necessary to make the Services available to you. We cannot provide you with the Services without this type of cookie.
• Functional cookies: These are used to recognize you when you return to the Services. This enables us to adapt our content for you, and remember your preferences.
• Analytical or Performance cookies: We also use cookies for analytics purposes in order to operate, maintain and improve our Services.

You can find more information about your rights and choices, and how to block the use of certain cookies in the section Your Rights and Choices below.

What information do we automatically collect as you use the Services?

• Device Information: We receive information about the device and software you use to access our Services, including internet protocol (IP) address, Internet Service Provider, web browser type, operating system version, referring URLs, application installations, and device type and identifiers.
• Location Information: We may infer your general location information from other information we collect from and about you (for example, your IP address may indicate your general geographic region). We do not collect precise geolocation data.
• Usage Information: To help us understand and analyze how you use our Services and to help us improve them, we automatically receive information about your interactions with our Services, like the pages or other content you view or interact with, the features you use, your code generation patterns, prompt history, and the dates and times of your visits.

1.3 Information We Receive from Third Parties

• Information from third party services: If you choose to link our Services to a third-party account (such as Google for SSO or GitHub for repository management), we may receive information about you, including your profile information and your use of the third-party account, in accordance with your settings on such third-party account. If you wish to limit the information available to us, you should visit the privacy settings of your third-party accounts to learn about your options.
• Other third parties: We may receive additional information about you, such as demographic data, from third parties such as data or marketing partners and combine it with other information we have about you.

1.4 Claude / MCP Connector

If you connect icōd.ai to Claude (Anthropic's AI assistant) through the icōd.ai MCP connector, the following applies in addition to the rest of this policy:

• The connector acts as a bridge: it authenticates your request and forwards it to icōd.ai's own backend using your icōd.ai account's access token. It does not maintain a separate database of your project data, code, secrets, or documents. All of that is stored and governed under the rest of this policy, exactly as it would be if you used icōd.ai directly without Claude.
• Depending on the action you ask Claude to perform, data exchanged with the connector can include: your icōd.ai user ID and email address; project data such as names, prompts, generated code, and deployment/domain settings; environment secrets you explicitly add, read, update, or delete through the connector; GitHub-related data (commit messages, repository and branch names, and a repository access token) when you use a GitHub-related action; and any document or plan you choose to send to icōd.ai.
• Authentication state that keeps your connection working is held only in server memory (never written to disk or a database) and expires automatically within minutes. If you use the connector through Claude Desktop rather than the web app, a single access token is instead stored in a file on your own device, not on any server icōd.ai operates.
• The connector shares data only with icōd.ai's own backend. When you use a GitHub-related action, it also shares data with GitHub, using a token you supply for that purpose. It does not share data with any other third party, does not run its own analytics or tracking, and does not use your data to train AI models.
• You can disconnect the connector at any time from Claude's own connector settings, which revokes its access to your account going forward.

2. How We Use the Information We Collect

We use the information we collect:

• To provide, maintain, improve, and enhance our Services;
• To train and refine our AI systems to improve code generation accuracy and optimize platform performance based on real-world usage (See Enterprise User Exception below);
• To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide customer support;
• To facilitate the connection of third-party services or applications, such as Google and GitHub;
• For marketing purposes, such as developing and providing promotional and advertising materials;
• To personalize your experience on our Services such as presenting tailored content;
• To facilitate transactions and payments via Stripe;
• To detect and prevent fraud, and respond to trust and safety issues that may arise;
• For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
• For other purposes for which we provide specific notice at the time the information is collected.

Enterprise User Exception: If you are an Enterprise plan customer, we explicitly waive our right to use your data for AI training purposes. Custom data handling agreements apply, and your data is not used to train our AI models or shared with third parties without your explicit consent.

De-Identified Information: Please note that we may de-identify the information we collect from and about you so that it can no longer be reasonably linked to you or your device. Once information has been de-identified in this way, we can use and share it for any purpose at our discretion, and this Privacy Policy no longer applies to such information.

3. Your Privacy Obligations

icōd.ai provides you with the ability to build, generate, and publish applications that could be used to collect personally identifiable information from its users (including capturing environment variables, handling end-user login credentials, or storing generated app data). If you publish such content or build such applications, it is your responsibility to understand your legal obligations and to comply with all applicable laws, including:

• Acting as the Data Controller for the data collected by your applications, while icōd.ai acts strictly as the Data Processor providing hosting and infrastructure.
• Providing your users with appropriate notices of their privacy rights, which should incorporate this Privacy Policy by reference.
• Obtaining any necessary consent from your users for the processing, storage, use, and transfer of any of their personally identifiable information that you collect.
• If applicable, providing any required notices and obtaining any required verifiable parental consent under the Children's Online Privacy Protection Act (COPPA) or similar laws.
• Complying with your legal obligations to allow your users to correct their personally identifiable information or to have it erased.

4. Legal Bases for Processing Information

Various global privacy laws (such as those in the European Economic Area, United Kingdom, and Brazil) require that we have a “legal basis” to process your information. The legal bases on which we rely to process your information include:

• Consent: You have consented to the use of your information, for example, where legally required, to send you marketing communications.
• Contractual necessity: We need your information to provide you with the Services, for example to facilitate your registration and process your payments.
• Compliance with a legal obligation: We have a legal obligation to use your information, for example to comply with tax and accounting obligations.
• Legitimate interests: We have a legitimate interest in using your information for a business purpose that does not override your individual rights and interests. For example, we have a legitimate interest in using your information for product development, internal analytics, to improve the accuracy of our AI and machine learning technologies (such as code generation), and to improve the safety, security, and performance of our Services.

5. How We Share the Information We Collect

We share information with the following categories of third parties.

• Affiliates: We may share any information we receive with our corporate affiliates under common ownership or control for any of the purposes described in this Privacy Policy.
• Service Providers: We may share any information we receive with vendors retained in connection with the provision of our Services and process your information on our behalf. These entities include cloud hosting providers (e.g., AWS/Google Cloud), AI model providers (e.g., OpenAI/Anthropic), billing and payment processors (e.g., Stripe), analytics, legal support, marketing, security, and fraud prevention companies.
• As Required by Law and Similar Disclosures: We may access, preserve, and disclose your information if we believe in good faith that doing so is required or appropriate to:

1. comply with law enforcement requests and legal process, such as a court order or subpoena
2. respond to your requests
3. protect your, our, or others' rights, property, or safety

• Merger, Sale, or Other Asset Transfers: We may share your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our business or assets.
• Consent: We may also disclose information from or about you with your permission.

6. Your Rights and Choices

• Sharing Preferences: If you configure a GitHub integration through our platform, icōd.ai manages the repository creation and pushes code directly to a default branch. You must manage repository visibility (public/private) directly in accordance with our current platform limitations and GitHub's policies.
• Marketing Communications: You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt-out of receiving promotional messages from us, you will continue to receive administrative messages from us.
• How to Block Cookies: You can change your browser settings to block, disable, or notify you when you receive a Cookie, delete Cookies, or browse our Services using your browser's anonymous usage setting. However, if you use your browser settings to block all Cookies (including essential Cookies) you may not be able to access all or parts of our Services.

7. Your European Privacy Rights

If you are located in the European Economic Area or the United Kingdom, you have the additional rights described below.

• You may request access to the information we maintain about you, update and correct inaccuracies in your information, restrict or object to the processing of your information, have the information anonymized or deleted, as appropriate, or exercise your right to data portability to easily transfer your information to another company (where technically feasible). In addition, you also have the right to lodge a complaint with a supervisory authority.
• You may withdraw any consent you previously provided to us regarding the processing of your information, at any time and free of charge.
• You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy regarding the processing of your information, at any time (Note: If you are an EEA resident, our appointed EU Representative is [Insert EU Rep Name/Company], reachable at [Insert Email/Address]). Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain information for backups, archiving, prevention of fraud and abuse, analytics, or satisfaction of legal obligations.

8. Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

9. Retention

We take measures to delete your information or maintain it in a de-identified form when it is no longer necessary to be kept in identifiable form for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When you request to delete your account, we delete your active data within 30 days. Please note that residual data may remain in secure, encrypted backups for up to an additional 90 days.

10. Security

We use a variety of technical, organizational, and physical safeguards designed to safeguard the information we maintain, including using SSL/TLS encryption for data in transit and secure server hosting. However, as our Services are hosted electronically, we can make no guarantees as to the security or privacy of your information.

11. Children's Privacy

Our Services are directed to a general audience and are not directed to children under the age of 13 (or 16 in certain jurisdictions). By agreeing to our Privacy Policy and Terms of Service, you represent that you are allowed to use our Services according to your country's applicable age limits. If we learn that a child is under the applicable age requirement in their jurisdiction, we will take reasonable steps to obtain parental consent or delete the user's personal information from our files as soon as is practicable. Please contact us at support@icod.ai if you believe that a user has provided us with representations in violation of this Privacy Policy.

12. Notice at collection

The following table summarizes the categories of “personal information” (as defined under relevant state laws cited below) that we collect from and about you, the purposes for which we use each category, and the third parties to which we share each category for a business purpose.

13. Additional information for California residents

If you are a California resident, the California Consumer Privacy Act (“CCPA”) requires us to provide you with a summary of the categories of “personal information” (as defined under the CCPA) that we collect from and about you, the purposes for which we use each category, and the third parties to which we share each category for a business purpose. You may find this summary in the section “Notice at collection” above.

If you are a California resident, you may exercise the following rights with regard to data where we determine the purposes and means of processing:

The Company may use Personal Data for the following purposes:

• The right to request a copy of the personal information that we have collected about you in the prior 12 months.
• The right to request details about the categories of personal information we collect, the categories of sources, the business or commercial purposes for collecting information, and the categories of third parties with which we share information.
• The right to request deletion of the personal information that we have collected about you, subject to certain exemptions.
• The right to opt out of the sale of your personal information. We do not “sell” personal information as such term is defined in the CCPA.
• The right to opt out from profiling, defined as the automated processing of personal information to assess or forecast aspects of your behavior.
• The right to request us to correct errors in the personal information that we hold about you.

California residents can submit access and deletion requests by emailing us at support@icod.ai. You have the right not to receive discriminatory treatment for the exercise of your CCPA privacy rights, subject to certain limitations. An authorized agent may submit an access or deletion request on your behalf by sending a written authorization signed by you to support@icod.ai.

14. Additional information for Colorado residents

If you are a Colorado resident, the Colorado Privacy Act (“CPA”) requires us to provide you with a summary of the categories of “personal information” that we collect. You may find this summary in the section “Notice at collection” above. If you are a Colorado resident, you may exercise the rights to access, correction, deletion, and opt-out of sales and profiling. We will not charge a fee for up to two requests per year. You also have the right to appeal if we decline a request. Colorado residents can submit requests by emailing us at support@icod.ai.

15. Additional information for Connecticut residents

If you are a Connecticut resident, the Connecticut Data Privacy Act (“CDPA”) requires us to provide you with a summary of the categories of “personal information” that we collect. You may find this summary in the section “Notice at collection” above. If you are a Connecticut resident, you may exercise the rights to access, correction, deletion, and opt-out of sales and profiling. We will not charge a fee for up to one request per year. You also have the right to appeal if we decline a request. Connecticut residents can submit requests by emailing us at support@icod.ai.

16. Additional information for Iowa residents

If you are an Iowa resident, the Iowa Consumer Data Protection Act (“ICDPA”) requires us to provide you with a summary of the categories of “personal information” that we collect. You may find this summary in the section “Notice at collection” above. If you are an Iowa resident, you may exercise the rights to access, deletion, and opt-out of sales and profiling. We will not charge a fee for up to two requests per year. You also have the right to appeal if we decline a request. Iowa residents can submit requests by emailing us at support@icod.ai.

17. Additional information for Utah residents

If you are a Utah resident, the Utah Consumer Privacy Act (“UCPA”) requires us to provide you with a summary of the categories of “personal information” that we collect. You may find this summary in the section “Notice at collection” above. If you are a Utah resident, you may exercise the rights to access, deletion, and opt-out of sales. We will not charge a fee for up to one request per year. Utah residents can submit requests by emailing us at support@icod.ai.

18. Additional information for Virginia residents

If you are a Virginia resident, the Virginia Consumer Data Protection Act (“VCDPA”) requires us to provide you with a summary of the categories of “personal information” that we collect. You may find this summary in the section “Notice at collection” above. If you are a Virginia resident, you may exercise the rights to access, correction, deletion, and opt-out of sales and profiling. We will not charge a fee for up to two requests per year. You also have the right to appeal if we decline a request. Virginia residents can submit requests by emailing us at support@icod.ai.

19. Additional Information for Canadian Residents

If you are a resident of Canada, your personal information is processed in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. You have the right to request access to the personal information we hold about you, request corrections to inaccurate data, and withdraw your consent to our processing of your data at any time, subject to legal or contractual restrictions. Because we operate in the United States and Pakistan, your data may be transferred outside of Canada, where it may be subject to access by local law enforcement or regulatory authorities. To exercise your privacy rights under PIPEDA, please contact us at support@icod.ai.

20. International Visitors

icōd.ai Labs Incorporated is headquartered in the United States, with operations and service infrastructure located in locations abroad (for example, Pakistan). If you use the Services from regions of the world with laws governing data processing, you accept that you are transferring your information to the United States, Pakistan, and other hosting locations for storage and processing. By providing information to icōd.ai, you agree to such transfer, storage, and processing.

21. Update Your Information or Pose a Question

You can update your account and profile information or close your account through your profile settings. If you have questions about your privacy on the Services or this privacy policy, please contact us at support@icod.ai.

22. Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we process information, we will provide you with notice in the application and via email in accordance with applicable legal requirements.

23. Contact Information

If you have any questions, comments, or concerns about our processing activities, please email us at support@icod.ai or write to us at: icōd.ai LLC 2500 Quantum Lakes Drive, Suite 203, Boynton Beach, FL 33426