Privacy Notice

This notice applies to Cocoding websites, applications, developer tools, support channels, and related prompt-to-app services. A separate written agreement or an organization administrator may provide additional terms for a managed workspace.

Cocoding acts as a controller for its own account, website, security, and business operations. When an organization uses Cocoding to process personal data in its workspace, the organization may be the controller and Cocoding may act as its processor. See the Data Processing page for the contract entry point.

The information involved depends on how you use Cocoding and which integrations you enable.

• Account and identity data, such as name, email address, profile details, organization membership, sign-in method, and security events.
• Workspace content, including prompts, uploaded material, generated source code and assets, templates, configuration, previews, and feedback.
• Integration data that you authorize, such as repository identifiers, installation metadata, connection status, and the minimum credentials or tokens needed to operate the connection.
• Product and device telemetry, such as feature activity, usage and metering events, IP address, browser and device information, timestamps, diagnostics, and audit records.
• Commercial and support information, such as plan, invoice and payment status supplied by payment providers, support requests, and business communications. Cocoding does not need full payment-card details to provide the product.

Cocoding uses information to provide and secure accounts and workspaces; run requested builds, previews, integrations, and deployments; meter usage and administer plans; diagnose and improve the service; communicate operational and product information; prevent abuse; and meet legal obligations.

Where law requires a legal basis, processing may be necessary to perform a contract, pursue legitimate interests in operating and protecting the service, comply with law, or act on consent. Consent may be withdrawn for future processing where it is the applicable basis.

Cocoding may send prompts, relevant workspace context, and instructions to model providers or other services selected by you, your organization, or the product configuration. Their handling of data can depend on the provider, account, region, and agreement in use. Review the applicable provider terms and do not submit information you are not authorized to process.

A connection to Git hosting, cloud, identity, model, payment, or notification services is used to perform the action you request. Disconnecting a service stops new access through that connection but does not automatically delete information already processed or retained for security, billing, or legal reasons.

Information may be shared with service providers that operate Cocoding; model and integration providers used at your direction; other members and administrators of your organization according to workspace permissions; professional advisers; or authorities and other parties when reasonably necessary for law, safety, fraud prevention, or protection of rights. Information may also transfer as part of a financing, reorganization, acquisition, or sale, subject to applicable safeguards.

Cocoding does not disclose workspace content to unrelated parties for their independent use merely because it is stored in the service.

Information is retained for as long as reasonably needed to provide the service, maintain security and audit evidence, administer billing, resolve disputes, and comply with law. Retention can vary by record type, workspace settings, plan, and contractual requirements. Backups and logs may expire on a different schedule from active data.

Cocoding applies technical and organizational safeguards appropriate to the service and the risks involved, but no online system is risk-free. Report a suspected vulnerability to security@cocoding.ai and do not include secrets or personal data beyond what is necessary for the report.

You can update certain account information and connection settings in the product. Depending on location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, and to complain to a supervisory authority. Organization-managed data requests may need to be directed to the organization that controls the workspace.

Send privacy or data-rights requests to legal@cocoding.ai. Cocoding may need to verify identity and authority before acting, and legal exceptions may apply.

Cocoding and its providers may process information in countries other than yours. Where required, the parties use an available legal transfer mechanism and contractual safeguards appropriate to the processing.

This notice may change as the service and law evolve. Material updates will be identified by a new effective date and, where required, additional notice.