Privacy policy

This Privacy Policy explains how we collect, use, disclose, and retain personal data when you use usecoded.com, related auth hosts, accounts, the waitlist, Paid checkout, and the usecoded CLI license (together, the “Service”). It works with our Terms of service.

Account and contact. If you sign in with Google or GitHub: name, email, and profile photo those providers send us. If you join the waitlist: email and join time. If you write us: the address and message contents (support, feedback, refunds).

Payment. Pro ($10/month) is charged by Razorpay. They collect card or UPI details on their pages. We receive status, amount, currency, and payment / subscription ids so we can unlock the CLI seat and handle refunds. We do not store full card numbers.

Automatic / technical. Session cookies, CSRF and OAuth state, IP address, and basic browser / device data in server logs. If Google Analytics is enabled on the site, we receive aggregated page-use data from it.

What we do not collect via the website. Your source code, prompts, and repo files are not uploaded to us to run the Paid CLI. That product runs on your machine.

We use personal data to:

• provide and maintain the Service (site, accounts, waitlist)
• authenticate you and keep sessions working
• bill, renew, and refund Paid subscriptions through Razorpay
• send Service messages you asked for (including waitlist updates)
• debug, prevent fraud and abuse, and secure the Service
• understand site usage (including Analytics, when enabled)
• comply with law, tax, and accounting rules

We do not sell personal data. We do not use it for cross-context behavioral advertising. Google account data is used only to sign you in and show your account — not for ads or credit decisions (Google Limited Use).

Service providers. Vercel (hosting), Supabase / PostgreSQL (database), Razorpay (payments), Google and GitHub (sign-in), Google Analytics when loaded. They process data for us to run the Service — they are not buyers of your data.

Legal and safety. We may disclose data when required by law or legal process, or to prevent fraud, abuse, or harm.

Business transfers. If the project is sold, merged, or restructured, personal data may move with it under this policy (or a successor notice).

Google scopes: openid, email, profile. We do not access Gmail, Drive, or Calendar. GitHub provides the same kind of public profile fields.

We keep a session cookie (about 30 days with ongoing use). Sign-out ends it. You can revoke Google access under Third-party access in your Google Account. Apple and Microsoft buttons are not connected until credentials are set; we collect nothing from them until then.

Paid is a license for the closed-source usecoded CLI you run locally. This policy covers account and billing data for that seat. Files that never leave your computer are outside what we collect through the Service described here.

We keep personal data only as long as needed to run the Service and meet legal duties. Waitlist and account records stay until you ask us to delete them, or we close the account under the Terms. Payment records needed for tax, dispute, or accounting stay as long as law requires. Sessions expire; signing out ends the current one.

We use commercially reasonable technical and organizational measures (HTTPS, database access controls, OAuth via Google / GitHub, payments via Razorpay). No method of transmission or storage is fully secure. Avoid sending secrets in waitlist fields or email that you cannot rotate.

Our hosting and database providers may store and process data in regions outside your country (including the United States). By using the Service you understand that transfer. We still apply the protections in this policy.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal data we hold, and to object to or restrict certain processing. Email saniaanees91@gmail.com to make a request. Say which email the record is under. We may verify identity before acting. We will not discriminate against you for exercising rights the law gives you.

Paid refunds follow the Refund & cancellation policy.

The Service is not directed at children under 13. You must be at least 13 to use it. If your country sets a higher digital age of consent, you must meet that age too.

If you are under 18 (or under the age of majority where you live), a parent or guardian must agree to the Terms before you buy Paid. If we learn we have data from someone under 13, we will delete it. Write saniaanees91@gmail.com if you believe that happened.

We may update this policy. We will change the date at the top. Live version: https://usecoded.com/privacy. Continued use after an update means you accept the revised policy, except where law requires a different notice.