Privacy Policy

1. Introduction

Codewick is built on a privacy-first foundation. Your code is yours. We designed our architecture so that your source code, project files, and chat history never touch our servers. This policy explains what data we do collect, why, and how we protect it.

2. What We Collect

We collect the minimum amount of data necessary to operate the service:

• Account data — your email address and a securely hashed password, used for authentication.
• Subscription and billing — payment processing is handled entirely by Stripe. We store your subscription tier and status but never your full card number.
• Anonymous analytics — aggregated, non-identifying usage metrics (e.g., feature popularity, crash reports) to improve the product.

3. What We Do NOT Collect

We do not collect, store, or have access to:

• Your source code or project files
• Chat messages or AI conversation history
• File names or project names
• Personally identifiable information beyond your account email

4. What Is Sent to AI Models

When you use AI features, only the code and context relevant to the current task is sent to the AI provider. This data is transmitted directly from the Codewick desktop application to the AI provider over encrypted HTTPS connections.

This data is never routed through or stored on Codewick servers. Each AI provider's own data handling policies apply to data in transit. We encourage you to review the privacy policies of the AI providers available in Codewick's settings.

5. Cookies

Our website and web dashboard use only:

• Functional cookies — session tokens required for authentication. These are strictly necessary and cannot be disabled.
• Anonymous analytics cookies — used by Cloudflare Web Analytics. These do not track individuals or use fingerprinting.

We do not use advertising cookies, tracking pixels, or third-party marketing scripts.

6. Analytics

We use Cloudflare Web Analytics, a privacy-respecting analytics service that does not use client-side state, does not track individual users, and is fully GDPR-compliant. You can opt out of in-app analytics at any time from Settings > Privacy.

7. Data Storage

Account data and subscription records are stored on infrastructure provided by Cloudflare, located in the United States. All data is encrypted at rest and in transit.

Your code, project files, and AI chat history remain local to your device. They are never uploaded to, processed by, or stored on Codewick servers.

8. Your Rights

Under the General Data Protection Regulation (GDPR) and similar laws, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Erasure — request deletion of your account and all associated data. We will complete erasure within 30 days of your request.
• Portability — receive your account data in a structured, machine-readable format.
• Withdraw consent — revoke consent for optional data processing (e.g., analytics) at any time without affecting core service functionality.

9. Third Parties

We work with a limited number of trusted third parties:

• Stripe — payment processing and subscription management.
• Cloudflare — hosting, CDN, DNS, and anonymous web analytics.
• OpenRouter — AI model routing and processing. Code context is sent directly from your device to OpenRouter; it is not stored on Codewick infrastructure.

We do not sell, rent, or share your personal data with any other third parties.

10. Contact

If you have questions about this policy or wish to exercise your data rights, contact us at privacy@codewick.ai.