1. Introduction
Welcome to Codeflow ("we," "our," or "us"), the AI-native project management platform for developers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at codeflow.pixelcreative.io (the "Service").
We are committed to protecting your privacy and ensuring you understand how your data is handled. By using Codeflow, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: When you create an account through OAuth (Google or GitHub), we receive your name, email address, and profile information from these providers
- Project Data: Tasks, documents, designs, files, and other content you create or upload
- Communication: Messages you send through our support channels
2.2 Information Collected Automatically
- Usage Data: How you interact with our Service, features used, time spent
- Device Information: Browser type, operating system, IP address, device identifiers
- Performance Data: Through Cloudflare Observability and Vercel Analytics for service optimization
2.3 AI Processing Data
- Content Analysis: We process your project content to generate embeddings for semantic search and AI features using Supabase's gte-small model and Hugging Face services
- Search Queries: Your search queries within the platform to improve AI assistance
3. How We Use Your Information
We use your information to:
- Provide Service: Create and manage your account, process your requests
- AI Features: Enable semantic search, content recommendations, and AI-powered project assistance
- Communication: Send important updates, respond to support requests
- Improvement: Analyze usage patterns to improve our Service
- Security: Detect and prevent fraud, abuse, and security threats
- Legal Compliance: Meet legal obligations and protect our rights
4. Information Sharing and Disclosure
4.1 Third-Party Service Providers
We share information with trusted service providers who assist in operating our Service:
- Supabase: Database hosting, authentication, file storage, and AI embeddings
- Stripe: Payment processing (for paid features)
- Cloudflare: Content delivery, security, and performance monitoring
- Vercel: Application hosting and analytics
- Hugging Face: AI model processing for enhanced features
4.2 Other Disclosures
We may disclose your information:
- Legal Requirements: When required by law, court order, or government request
- Safety: To protect the rights, property, or safety of Codeflow, users, or others
- Business Transfer: In connection with a merger, acquisition, or sale of assets
- Consent: With your explicit consent for other purposes
5. Data Security
We implement appropriate technical and organizational security measures to protect your information:
- Encryption: Data encrypted in transit and at rest
- Access Controls: Limited access to personal information on a need-to-know basis
- Infrastructure: Secure hosting through Supabase and Vercel with industry-standard protections
- Monitoring: Continuous monitoring for security threats and vulnerabilities
6. Data Retention
- Active Accounts: We retain your information while your account is active
- Deleted Accounts: After account deletion, we retain data for 30 days to allow account recovery, then permanently delete personal information
- Legal Requirements: Some data may be retained longer when required by law
- Backups: Data in automated backups is deleted within 90 days of account deletion
7. Your Privacy Rights
Depending on your location, you may have the following rights:
7.1 General Rights
- Access: Request a copy of your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request your data in a machine-readable format
- Objection: Object to processing of your information
7.2 California Residents (CCPA)
If you're a California resident, you have additional rights:
- Know: Right to know what personal information is collected and how it's used
- Delete: Right to request deletion of personal information
- Opt-Out: Right to opt-out of sale of personal information (we don't sell your data)
- Non-Discrimination: Right not to be discriminated against for exercising privacy rights
To exercise your rights, contact us at support@pixelcreative.io.
8. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to remove such information.
9. International Data Transfers
Our Service is hosted in the United States and primarily serves U.S. users. If you access our Service from outside the U.S., your information may be transferred to, stored, and processed in the U.S. where our servers are located.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Authentication: Keep you logged in
- Preferences: Remember your settings
- Analytics: Understand how our Service is used
- Performance: Optimize Service performance
You can control cookies through your browser settings, but disabling them may affect Service functionality.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Email: Sending notice to your registered email address
- Service: Posting a notice on our Service
- Effective Date: Updating the effective date at the top of this policy
Continued use of our Service after changes constitutes acceptance of the updated policy.
12. Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
13. Contact Information
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Email: support@pixelcreative.io
Subject Line: Privacy Policy Inquiry
We will respond to privacy-related inquiries within 30 days.
14. Data Protection Officer
For privacy matters, you can reach our workspace at support@pixelcreative.io with "Privacy" in the subject line.
This privacy policy is designed to be transparent about our data practices while complying with applicable privacy laws. We encourage you to read it carefully and contact us with any questions.