Privacy Policy

Updated and effective: July 26, 2026

We at Codebuddy AI Inc. (together with our affiliates, “Codebuddy”, “we”, “our” or “us”) respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Information we collect from or about you when you use our website, applications, and services (collectively, “Services”).

1. Personal information we collect

We collect personal information relating to you (“Personal Information”) as follows:
Personal Information You Provide: We collect Personal Information if you create an account to use our Services or communicate with us as follows:
Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, payment card information, and transaction history, (collectively, “Account Information”).
User Content: When you use our Services, we collect Personal Information that is included in the input, file uploads, or feedback that you provide to our Services (“Content”).
Communication Information: If you communicate with us, we collect your name, contact information, and the contents of any messages you send (“Communication Information”).
Social Media and Community Information: We operate a Discord community server and pages on social media sites including X (formerly Twitter) and YouTube. When you interact with our community server or our social media pages, we will collect Personal Information that you elect to provide to us, such as your contact details (collectively, “Social Information”). In addition, the companies that host these services may provide us with aggregate information and analytics about our activity there.
Other Information You Provide: We collect other information that you may provide to us, such as when you participate in our events or surveys or provide us with information to establish your identity (collectively, “Other Information You Provide”).
Personal Information We Receive Automatically From Your Use of the Services: When you visit, use, or interact with the Services, we receive the following information about your visit, use, or interactions (“Technical Information”):
Log Data: Information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services.
Usage Data: We may automatically collect information about your use of the Services, such as the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection.
Device Information: Includes name of the device, operating system, device identifiers, and browser you are using. Information collected may depend on the type of device you use and its settings.
Cookies: We use cookies to operate and administer our Services, and improve your experience. A “cookie” is a piece of information sent to your browser by a website you visit. You can set your browser to accept all cookies, to reject all cookies, or to notify you whenever a cookie is offered so that you can decide each time whether to accept it. However, refusing a cookie may in some cases preclude you from using, or negatively affect the display or function of, a website or certain areas or features of a website. For more details on cookies, please visit All About Cookies.
Analytics: We may use a variety of online analytics products that use cookies to help us analyze how users use our Services and enhance your experience when you use the Services.

2. How we use personal information

Personal Information. We may use Personal Information for the following purposes:
To provide, administer, maintain and/or analyze the Services;
To improve our Services and conduct research;
To communicate with you; including to send you information about our Services and events;
To develop new programs and services;
To prevent fraud, criminal activity, or misuses of our Services, and to protect the security of our IT systems, architecture, and networks;
To carry out business transfers; and
To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.
Aggregated or De-Identified Information. We may aggregate or de-identify Personal Information so that it may no longer be used to identify you and use such information to analyze the effectiveness of our Services, to improve and add features to our Services, to conduct research and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy. We will maintain and use de-identified information in anonymous or de-identified form and we will not attempt to reidentify the information, unless required by law.
As noted above, we may use Content you provide us to improve our Services. This means operating and debugging the Services, investigating and resolving problems you report to us, and refining the instructions and prompts we send to the AI providers listed below.

We do not train AI models on your Content. Codebuddy does not build, train, or fine-tune AI models, and we do not provide your Content to any third party for the purpose of training their models. Your code is never used to train AI models, whether or not you opt out of data storage.

Opting out of data storage. You can opt out of the storage of your interactions at any time from the “Opt out of data storage” section of your profile page at https://www.codebuddy.ca/profile. When you opt out, your submitted code and related interaction records are discarded after the request has been processed rather than being retained. Opting out may reduce our ability to help you troubleshoot a problem, because we will no longer hold the record of the request you are asking us about.

3. Disclosure of personal information

In certain circumstances we may provide your Personal Information to third parties without further notice to you, unless required by the law:
AI Providers: Codebuddy is an AI coding assistant, so delivering the Service requires sending your Content — including the source code, files and instructions you submit — to third-party AI providers who generate the response. We currently use the following providers for this purpose:
- OpenAI, for chat and code generation models, for text embeddings used to index your repository, for voice transcription, and for text-to-speech.
- Anthropic, for chat and code generation models.
- OpenRouter, which routes requests to model providers including Google, xAI, DeepSeek, Moonshot AI and Z.ai on our behalf.
- ElevenLabs, for optional text-to-speech voices.
These providers process your Content in order to return a response to you. We do not permit them to use your Content to train their models. Which provider receives a given request depends on the model you select for that request; the model list is shown in the plugin and at https://www.codebuddy.ca/plans. If you supply your own API key (“bring your own key”), the request is still made by our servers using your key — your Content follows the same path either way, and the difference is which account is billed.

Authentication and Payments: We use GitHub for account sign-in. When you sign in, GitHub provides us with the account information you authorize, and we store an access token so that we can act on your behalf where you have permitted it. We use Stripe to process payments; your payment card details are handled by Stripe and we do not store full card numbers.

Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may provide Personal Information to vendors and service providers, including providers of hosting services, customer service vendors, cloud services, email communication software, web analytics services, and other information technology providers, among others. Pursuant to our instructions, these parties will access, process, or store Personal Information only in the course of performing their duties to us.
Business Transfers: If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a “Transaction”), your Personal Information and other information may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
Legal Requirements: We may share your Personal Information, including information about your interaction with our Services, with government authorities, industry peers, or other third parties (i) if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, or users, or the public, or (vi) to protect against legal liability.
Affiliates: We may disclose Personal Information to our affiliates, meaning an entity that controls, is controlled by, or is under common control with Codebuddy. Our affiliates may use the Personal Information we share in a manner consistent with this Privacy Policy.
Content You Choose to Send Elsewhere: Some features send information outside the Service at your direction. For example, if you include the contents of a web page in a prompt, we fetch that page; and if you connect a repository, we access it using the permissions you granted at sign-in. Be sure you trust any third party whose material you bring into, or send out of, the Service.

4. Additional U.S. state disclosures

The following table provides additional information about the categories of Personal Information we collect and how we disclose that information. You can read more about the Personal Information we collect in “Personal information we collect” above, how we use Personal Information in “How we use personal information” above, and how we retain Personal Information in “Security and Retention” below.
Category of Personal Information

Disclosure of Personal Information

Identifiers, such as your name, contact details, IP address, and other device identifiers
We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; and to parties involved in Transactions.

Commercial Information, such as your transaction history
We may disclose this information to our affiliates, vendors and service providers (including our payment processor) to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; and to parties involved in Transactions.

Network Activity Information, such as Content and how you interact with our Services
We disclose this information to the AI providers identified above in order to generate the response you requested. We may also disclose it to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; and to parties involved in Transactions.

Geolocation Data
We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; and to parties involved in Transactions.

Your account login credentials and payment card information (Sensitive Personal Information)
We disclose this information to our affiliates, vendors and service providers, law enforcement, and parties involved in Transactions.

To the extent provided for by local law and subject to applicable exceptions, individuals may have the following privacy rights in relation to their Personal Information:
The right to know information about our processing of your Personal Information, including the specific pieces of Personal Information that we have collected from you;
The right to request deletion of your Personal Information;
The right to correct your Personal Information; and
The right to be free from discrimination relating to the exercise of any of your privacy rights.
We don’t “sell” Personal Information or “share” Personal Information for cross-contextual behavioral advertising (as those terms are defined under applicable local law). We also don’t process sensitive Personal Information for the purposes of inferring characteristics about a consumer.
Exercising Your Rights. To the extent applicable under local law, you can exercise privacy rights described in this section by submitting a request through our support team.
Verification. In order to protect your Personal Information from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Information. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Information and proof of residency for verification. If we cannot verify your identity, we will not be able to honor your request.
Authorized Agents. You may also submit a rights request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity and submit proof of your residency with us. Authorized agent requests can be submitted to our support team.
Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights under applicable local law. To appeal a decision, please send your request to our support team.

5. Children

Our Service is not directed to children under the age of 13. Codebuddy does not knowingly collect Personal Information from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided Personal Information to Codebuddy through the Service, please email our support team. We will investigate any notification and if appropriate, delete the Personal Information from our systems. If you are 13 or older, but under 18, you must have permission from your parent or guardian to use our Services.

6. Other websites

The Service may contain links, and makes API calls, to other websites not operated or controlled by Codebuddy, including social media services (“Third Party Sites”). The information shared with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.

7. Security and Retention

We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or email. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites.
We’ll retain your Personal Information for only as long as we need in order to provide our Service to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Information will depend on a number of factors, such as the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, our purpose for processing the information, and any legal requirements.
If you have opted out of data storage from your profile page, your submitted code and related interaction records are discarded once the request has been processed rather than being retained.

8. International users

Where your information is stored. Codebuddy is a Canadian company, and the servers and databases on which we store your Account Information and your Content are located in Canada.

Where your information is processed. Delivering the Service requires sending your Content to the AI providers identified in “Disclosure of personal information” above, and those providers operate infrastructure outside Canada, including in the United States. By using the Service you understand and acknowledge that your Content will be transmitted to and processed by those providers, and that your Personal Information may be disclosed to our service providers and affiliates in other jurisdictions for the purposes described in this Privacy Policy.
Legal Basis for Processing. Our legal bases for processing your Personal Information include:
Performance of a contract with you when we provide and maintain our Services. When we process Account Information, Content, and Technical Information solely to provide our Services to you, this information is necessary to be able to provide our Services. If you do not provide this information, we may not be able to provide our Services to you.
Our legitimate interests in protecting our Services from abuse, fraud, or security risks, or in operating, debugging, improving, or promoting our Services. This may include the processing of Account Information, Content, Social Information, and Technical Information. It does not include training AI models — see “How we use personal information” above. You can opt out of the storage of your interactions at any time from your profile page at https://www.codebuddy.ca/profile.
Your consent when we ask for your consent to process your Personal Information for a specific purpose that we communicate to you. You have the right to withdraw your consent at any time.
Compliance with our legal obligations when we use your Personal Information to comply with applicable law or when we protect our or our affiliates’, users’, or third parties’ rights, safety, and property.
Data Transfers. Where required, we will use appropriate safeguards for transferring Personal Information outside of certain countries. We will only transfer Personal Information pursuant to a legally valid transfer mechanism.
Data Protection. You can contact support for matters related to Personal Information processing.

9. Changes to the privacy policy

We may update this Privacy Policy from time to time. When we do, we will post an updated version on this page, unless another type of notice is required by applicable law.

10. How to contact us

Codebuddy AI Inc. is the controller responsible for your Personal Information, and our Privacy Officer is accountable for our compliance with this Privacy Policy.

If you have any questions, concerns, or complaints not already addressed in this Privacy Policy, or if you wish to exercise any of the rights described above, contact our Privacy Officer at privacy@codebuddy.ca. You can also reach us through the contact form at https://www.codebuddy.ca/contact.

[TO BE COMPLETED BEFORE PUBLICATION: registered business address, and the name or title of the individual designated as Privacy Officer. Canadian privacy legislation requires an identifiable accountable individual and a means of contacting them; an email alias alone is the minimum and a postal address is expected.]