Codeq8 Privacy Policy

This Privacy Policy explains how iScoot, LLC ("iScoot," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with Codeq8, including our website, hosted and mobile applications, GitHub integrations, APIs, notifications, support channels, and related services (collectively, the "Services").

This Privacy Policy applies to information we collect directly from you, automatically through your use of the Services, and from third-party services you choose to connect.

The information we collect depends on how you use Codeq8, which features you choose to enable, and which plan or billing flow applies to your account.

• Account and identity information, such as your name, email address, GitHub username, GitHub account identifiers, and organization or repository access details
• Workspace and service data, such as repository names, issue and pull request references, branch and workflow metadata, prompts, messages, generated outputs, thread content, run status, settings, notification state, hosted-runner metadata, and usage or capacity records
• Files and attachments that you submit to the Services
• Support and communications data, including messages you send to us
• Billing and subscription data, such as plan selection, billing status, subscription period, payment-provider identifiers, invoices, receipts, and tax or transaction metadata
• Mobile app and notification data, such as Expo push tokens, platform, application identifier, notification channel or sound settings, read markers, delivery markers, and deep-link targets needed to send notifications and open the relevant Codeq8 thread
• Technical and usage data, such as IP address, browser, device, and mobile app information, page requests, timestamps, error logs, security events, runner diagnostics, and operational logs
• Preference data stored through cookies, local storage, secure mobile storage, or similar technologies, such as session state and workspace preferences
• Optional integration data or other connected-account information if you choose to enable those features

• provide, operate, maintain, and secure the Services
• authenticate users and connected accounts
• run requested GitHub- or workflow-related functionality
• store and sync chat, thread, repository, and run state
• process files, prompts, and outputs needed to deliver the Services
• deliver mobile notifications, sync notification read state, and open the relevant Codeq8 web conversation from the mobile app
• transmit prompts, repository context, files, and related outputs to GitHub, OpenAI, or other integrated providers when needed to provide the features you request
• enforce usage limits, prevent abuse, and troubleshoot incidents
• communicate with you about support, security, operational, or legal matters
• improve reliability, performance, and product functionality
• comply with legal obligations and protect our rights, users, and the Services

We do not sell your personal information for money, and we do not share personal information for cross-context behavioral advertising.

We may share personal information in the following circumstances:

• with service providers and infrastructure vendors that help us host, secure, operate, and support the Services
• with GitHub, OpenAI, and other third-party integrations when necessary to provide the features you request
• within iScoot, LLC and its affiliates for internal business operations
• if required by law, legal process, or to protect rights, safety, and security
• in connection with a merger, acquisition, financing, reorganization, or sale of assets
• with your direction or consent

Depending on the feature used, we may rely on third-party providers such as GitHub, OpenAI, Vercel, Cloudflare, Firebase or Google Cloud, payment processors, mobile platform or push-notification providers, email or support providers, and hosted-runner infrastructure vendors to operate the Services.

If you use features that rely on OpenAI services such as Codex, prompts, files, repository context, outputs, and related metadata may be processed by OpenAI to provide that functionality. Those providers process information under their own terms and privacy policies, and in some cases under our instructions.

If you use the mobile app, app stores, operating-system providers, or push-notification providers may process app-install, device, crash, notification, and usage information under their own terms and privacy policies.

Hosted-runner features may process repository context, prompts, files, commands, outputs, logs, run metadata, and connected account or session materials as needed to start, operate, secure, meter, and troubleshoot requested runs.

We use cookies and similar technologies that are reasonably necessary to operate the Services, maintain sessions, remember preferences, and support reliability and security. We may also use browser storage for workspace or interface preferences.

You can control cookies through your browser settings, but disabling cookies or similar storage may cause some parts of the Services not to function properly.

We retain personal information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and business records. Retention periods vary depending on the type of data, how it is used, and applicable legal requirements.

We use commercially reasonable administrative, technical, and organizational measures designed to protect personal information. No security measure is perfect, and we cannot guarantee absolute security.

Codeq8 is operated from the United States, and personal information may be processed in the United States and other countries where we or our service providers operate. By using the Services, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your own.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of certain personal information, or to object to or restrict certain processing. You may also have the right to appeal a denied request under applicable law.

To make a privacy request, contact support@codeq8.com. For legal or compliance questions, contact legal@codeq8.com. We may need to verify your identity before fulfilling a request.

The Services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has provided personal information to us, contact us so that we can investigate and take appropriate action.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Your continued use of the Services after an updated Privacy Policy becomes effective means that you accept the revised policy.

iScoot, LLC

131 Continental Dr., Suite 305

Newark, DE 19713

United States

Privacy requests and support: support@codeq8.com

Legal and compliance: legal@codeq8.com