Skip to content

Legal

Privacy policy

This policy explains what personal data Codexa collects, why, and how you can exercise your rights. It is written to match how the software actually works.

Last revised

Who we are

Codexa is operated by Codexa. For privacy questions contact privacy@codexa.app.

Data we collect

Categories of personal data
CategoryExamplesWhy
AccountEmail address, name, hashed password, email verification status, GitHub account id (if you sign in with GitHub)To create and secure your account
Workspace and billingWorkspace names, member roles, plan, subscription identifiers from Stripe or Razorpay, invoice recordsTo provide the service and bill for it
ProjectsProject files, snapshots, activity history, environment variables (encrypted), deployment records, logsTo provide the product
AI usagePrompts, conversation messages, agent runs, token countsTo run the agent and enforce plan limits
TechnicalIP address, user agent, timestamps, rate-limit counters, audit log entriesSecurity, abuse prevention, debugging
SupportMessages you send through forms, your email, the page you were onTo answer you

AI providers

When you start an AI run, the prompt and the project files the agent reads are sent to the AI provider configured by your operator (Anthropic or OpenAI). We do not send data to AI providers at any other time. See the AI policy.

Who we share data with

Only the providers listed on the subprocessors page, and each only when your operator has configured that integration. We do not sell personal data.

Cookies

We use a small number of first-party cookies for sessions, theme, and workspace selection. There are no advertising or third-party analytics cookies. See the cookie policy.

Retention

See the data retention page for how long each category is kept and what happens when you delete a project or account.

Your rights

Depending on where you live you may have the right to access, correct, export, or delete your personal data, or to object to certain processing. You can delete projects and your account from settings; for anything else email privacy@codexa.app and we will respond within 30 days.

Children

Codexa is not directed at children under 13 (or the higher age required in your jurisdiction) and we do not knowingly collect their data.

Changes

We will post changes to this page and update the revision date. Material changes will be announced to account holders by email.