Legal
Privacy Policy
Last updated: June 18, 2025 · Effective: June 18, 2025
1. Information We Collect
When you use CodeAstra, we collect information to provide and improve our services. This includes:
Account Information: Your name, email address, and authentication data provided through our identity provider (Clerk).
Usage Data: How you interact with CodeAstra, including features used, AI agent interactions, project metadata, and session analytics.
Code & Project Data: Code you write, import, or generate within CodeAstra sandboxes. Your code is processed in isolated WebContainer environments and is never used to train AI models.
Device Information: Browser type, operating system, screen resolution, and IP address for security and optimization purposes.
2. How We Use Your Information
We use your information to:
• Provide, maintain, and improve CodeAstra services
• Process AI agent requests and deliver contextual code assistance
• Analyze usage patterns to improve product features and performance
• Communicate important updates, security notices, and product announcements
• Ensure platform security and prevent abuse
• Comply with legal obligations
3. Data Storage & Security
Your data security is our priority. We implement industry-standard security measures including:
• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.3.
• Encryption at rest: Project data stored in our Convex backend is encrypted at rest.
• Isolated sandboxes: Code execution occurs in disposable WebContainer environments that are completely isolated from other users.
• Access controls: We enforce strict role-based access controls and audit logging for internal access to user data.
• SOC 2 compliance: Our infrastructure providers maintain SOC 2 Type II certification.
4. AI Model Providers
CodeAstra integrates with third-party AI model providers including Anthropic (Claude), OpenAI (GPT), and Google (Gemini). When you use AI features:
• Your prompts and relevant code context are sent to the selected model provider for inference.
• We do not share your complete codebase — only the contextually relevant portions needed for the specific task.
• None of the AI providers use your data for model training per our enterprise agreements.
• You can choose which AI model provider to use for each interaction.
5. Third-Party Services
We use the following third-party services:
• Clerk — Authentication and user management
• Convex — Backend database and real-time sync
• Vercel — Hosting and CDN delivery
• Sentry — Error tracking and performance monitoring
• Inngest — Background task orchestration
Each provider has its own privacy policy governing the data they process on our behalf.
6. Your Rights & Choices
You have the right to:
• Access your personal data and request a copy
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Export your projects and code at any time
• Opt out of non-essential communications
To exercise any of these rights, contact us at privacy@codeastra.dev.
7. Data Retention
We retain your data for as long as your account is active. When you delete your account:
• Personal information is deleted within 30 days
• Project data and code are permanently deleted within 7 days
• Anonymized analytics data may be retained for product improvement
• Backups containing your data are purged within 90 days
8. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Your continued use of CodeAstra after changes constitutes acceptance of the updated policy.
Last updated: June 18, 2025
Effective date: June 18, 2025