Privacy Policy

1. Introduction

Welcome to CodePhantom ("we," "our," or "us"). CodePhantom is an AI-powered coding assistant that helps developers analyze and solve coding problems. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using CodePhantom, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Profile information (name, profile picture) provided through authentication services
• Authentication credentials managed by Auth0

2.2 Payment Information

When you subscribe to our service, payment information is processed by Stripe. We do not store your full payment card details on our servers. Stripe handles all payment processing in accordance with their privacy policy and PCI DSS compliance standards.

2.3 Usage Data

We collect information about how you use our service, including:

• Credit usage and subscription status
• Images uploaded for code analysis
• Preferred programming languages
• Service interaction data

2.4 Technical Data

Automatically collected technical information includes:

• IP addresses
• Browser type and version
• Device information
• Operating system
• Access times and dates
• Pages viewed and features used

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our AI-powered code analysis service
• Payment Processing: To process subscription payments and manage billing through Stripe
• Code Analysis: To analyze code problems using artificial intelligence and provide solutions
• Communication: To send you service-related notifications, updates, and support responses
• Account Management: To manage your account, track credit usage, and handle subscription renewals
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To detect, prevent, and address technical issues, fraud, or security threats

4. Third-Party Services

We use several third-party services to provide our service. Each service has its own privacy policy:

4.1 Auth0

We use Auth0 for user authentication and account management. Auth0 processes your login credentials and profile information. For more information, please review Auth0's Privacy Policy.

4.2 Stripe

We use Stripe for payment processing. Stripe handles all payment transactions and stores payment information securely. For more information, please review Stripe's Privacy Policy.

4.3 AI Service Providers

We use third-party AI service providers to analyze code problems. When you upload images for code analysis, these images are sent to our AI service providers for processing. These providers may use this data in accordance with their privacy policies. For more information, please review our AI service provider's Privacy Policy.

Important: By using our service, you acknowledge that images you upload may be processed by third-party AI service providers and subject to their data usage policies.

4.4 Vercel

Our service is hosted on Vercel. Vercel may collect technical data related to hosting and performance. For more information, please review Vercel's Privacy Policy.

5. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption of data in transit using SSL/TLS
• Secure storage of authentication tokens
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure third-party integrations with industry-standard security practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account information is retained while your account is active
• Subscription and payment data is retained as required by law and for accounting purposes
• Usage data may be retained for service improvement and analytics
• Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to access and receive a copy of your personal information in a structured, machine-readable format.

7.2 Correction

You have the right to correct inaccurate or incomplete personal information.

7.3 Deletion

You have the right to request deletion of your personal information, subject to legal and contractual obligations.

7.4 Objection and Restriction

You have the right to object to processing of your personal information and to request restriction of processing in certain circumstances.

7.5 Withdrawal of Consent

Where processing is based on consent, you have the right to withdraw consent at any time.

To exercise these rights, please contact us at the email address provided in the Contact Information section below.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

We use cookies for:

• Authentication and session management
• Remembering your preferences
• Analyzing service usage and performance

9. Children's Privacy

Our service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information from our servers.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there.

By using our service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights regarding your personal information, please contact us: