Privacy Policy

Information you provide.

• Account information: name, email address, password (stored in hashed form), job title, company or organization name, professional designation and any profile details you choose to add.
• Billing information: billing name, billing address, tax registration number (if provided) and payment method details. Payment card information is collected and processed directly by our payment processor, Stripe. We receive and store only the card brand, the last four digits, the expiry date and a payment token, never the full card number.
• Content you submit: search queries, questions asked of AI-assisted features, calculator inputs, project information, notes, and documents or drawings you upload.
• Communications: messages you send to support or sales, survey responses and feedback.

Information collected automatically.

• Usage data: pages and code sections viewed, searches performed, features used, calculations run, time spent and interactions within the Service.
• Technical data: IP address, browser type and version, operating system, device type, screen size, referring URL, language settings and approximate location derived from your IP address.
• Log data: access times, error reports and security events.
• Cookies and similar technologies, as described in section 7.

Information from third parties.

• Payment status and transaction confirmations from Stripe.
• If you sign in using a third-party identity provider (for example, Google or Microsoft), the name and email address associated with that account.
• Business contact information from your employer or organization administrator when they add you to an organization account.

We use personal information for the following purposes:

• to create and manage your account, authenticate you and provide the features of the Service;
• to process subscriptions, trials, payments, invoices and receipts, and to collect amounts owing;
• to respond to support requests and communicate with you about your account, including service notices, billing and trial-ending reminders, and changes to our terms or policies;
• to generate responses to your queries, including through AI-assisted features, and to save your history and preferences within the Service;
• to monitor, analyze and improve the Service, develop new features and understand how the Service is used;
• to detect, investigate and prevent fraud, abuse, security incidents and violations of our Terms of Service, and to enforce our agreements, including the licence terms that govern the code content in the Service;
• to send marketing communications about CodeChek products and features where you have consented or where otherwise permitted by law (you may unsubscribe at any time); and
• to comply with legal obligations, respond to lawful requests and protect our rights and the rights of others.

We do not sell personal information.

Some features of the Service use large language models and other artificial intelligence technologies provided by third parties to interpret your queries and generate responses. When you use these features, the text of your query, relevant excerpts of code content and, where applicable, content you upload are transmitted to the AI provider for processing. We use providers whose contractual terms restrict them from using our customers’ data to train their models. [Confirm against current provider terms.] AI-generated outputs may be inaccurate and should be verified as described in our Terms of Service. Please do not submit personal information about other individuals, or confidential information you are not permitted to share, through these features.

We share personal information only as described below.

• Service providers. We engage third parties to perform services on our behalf, including payment processing (Stripe), cloud hosting and storage (for example, Amazon Web Services and Vercel), email delivery, customer support tools, analytics and AI processing. These providers may access personal information only to perform services for us and are required to protect it.
• Your organization. If your account is part of an organization account, the organization’s administrators may see your name, email address, role, seat status and aggregate usage information.
• Content licensors. Our agreements with the owners of code content may require us to report usage statistics. Any such reports are aggregated and do not identify individual users.
• Legal and safety. We may disclose personal information where required by law, subpoena or court order, or where we believe in good faith that disclosure is necessary to protect the rights, property or safety of CodeChek, our users or the public, or to investigate fraud or security issues.
• Business transactions. If CodeChek is involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.
• With your consent. We may share personal information for other purposes with your consent.

CodeChek is based in British Columbia, Canada. Our service providers may store or process personal information in Canada, the United States and other countries. When personal information is transferred outside Canada, it is subject to the laws of the jurisdiction in which it is stored and may be accessible to law enforcement and government authorities under those laws. We use contractual and technical safeguards designed to protect personal information wherever it is processed. Questions about our use of service providers outside Canada may be directed to our Privacy Officer using the contact details in section 12.

We keep personal information only as long as necessary for the purposes described in this Policy or as required by law. In general:

• account and profile information is retained for the life of your account and for up to [12] months after closure, after which it is deleted or anonymized;
• billing and transaction records are retained for [7] years to meet tax and accounting requirements;
• query history, calculator inputs and uploaded content are retained while your account is active, and are deleted or anonymized within [90] days after account closure unless you delete them sooner;
• usage and log data is retained in identifiable form for up to [24] months; and
• backups are retained on a rolling basis and overwritten within [35] days.

We use cookies and similar technologies to keep you signed in, remember your preferences, protect against fraud and understand how the Service is used.

• Essential cookies are required for the Service to operate and cannot be disabled.
• Functional cookies remember your settings, such as your selected jurisdiction or code edition.
• Analytics cookies help us understand usage patterns so that we can improve the Service. [Name the analytics provider, if any.]

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the Service from working. The Service does not currently respond to browser “Do Not Track” signals.

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information we hold, including encryption of data in transit and at rest, access controls, hashed password storage, logging and monitoring, and regular review of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will notify you and the appropriate authorities as required by law.

Subject to applicable law, you have the right to:

• access the personal information we hold about you and receive an explanation of how it has been used and to whom it has been disclosed;
• request correction of inaccurate or incomplete information;
• withdraw consent to our collection, use or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice (withdrawing consent may mean we can no longer provide the Service to you);
• request deletion of your account and personal information, subject to our retention obligations; and
• opt out of marketing communications by using the unsubscribe link in any marketing email or by contacting us.

You can update most account information from your account settings. To exercise other rights, contact our Privacy Officer using the details in section 12. We may need to verify your identity before responding, and we will respond within the time required by applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

The Service is intended for business and professional use and is not directed to individuals under the age of majority. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it.

We may update this Policy from time to time. We will post the revised Policy on our website with a new effective date and, where the changes are material, notify you by email or through the Service. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.

Questions, requests or complaints about this Policy or our handling of personal information may be directed to our Privacy Officer:

Privacy Officer, [CodeChek Inc.] [Address] Email: [privacy@codechek.ai]