Codesky Privacy Policy

1. Introduction

At Codesky ("We", "Us", "Our"), protecting your privacy is paramount. As a Saudi-first "vibe coding" platform, we are committed to safeguarding your personal data and project confidentiality in compliance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and applicable international standards.

This Privacy Policy explains how we collect, use, store, and protect your data when you use our platform, AI coding assistants, and cloud services.

2. Data We Collect

We collect the following types of information:

• Account Information: Name, email address, password hash, and billing information required to manage your subscription.
• Project Data (Private): The source code, assets, and files you upload or create in your private workspaces.
• Usage Data: Telemetry data, error logs, and interaction patterns with our UI (e.g., features used, session duration).
• AI Interaction Data: Prompts and context sent to our AI models to generate code.

3. How We Use Your Data

• Service Provision: To provide the "Vibe Coding" environment, compile your code, and maintain your private cloud workspace.
• AI Assistance: We process your code snippets and prompts through our AI Gateway to return code suggestions.
• Strict No-Training Policy: We DO NOT use your Private Project code to train our foundational AI models for the general public. Your code remains yours and is processed solely to serve you.
• Service Improvement: We use anonymized Usage Data (not source code) to improve platform performance and UX.

4. Data Storage & Residency

• Location: We strive to store personal data within the Kingdom of Saudi Arabia or in jurisdictions classified as adequate under KSA regulations.
• Encryption: All Project Data is encrypted at rest and in transit using industry-standard protocols (AES-256 / TLS 1.3).

5. Third-Party Processors

To provide our AI features, we may transmit specific prompts to third-party Large Language Model (LLM) providers.

These providers are contractually bound to process data only for the purpose of generating the response and not for training their models on your data (Zero-Retention Policy where applicable).

6. Your Rights (KSA PDPL)

Under Saudi Law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of incomplete or inaccurate data.
• Destruction: Request the deletion of your account and associated Project Data.
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.

7. User Responsibility

While we secure the platform, you are responsible for:

• Content Legality: Ensuring your uploaded files and code do not contain sensitive personal data of others (PII) unless you have the legal right to process it.
• Account Security: Managing access controls to your private account.
• File Integrity: You bear primary responsibility for the content, integrity, and legality of all files and projects you create or upload.

8. Contact Us

For privacy inquiries or to exercise your rights under the PDPL, please contact our Data Protection Officer at:

Email: privacy@codesky.sa

Address: Riyadh, Kingdom of Saudi Arabia