Introduction
Codemend (“Codemend,” “we,” “us”) is a product of Knod, Inc. This Privacy Policy explains how we collect, use, and protect your information when you use our error monitoring and AI fix generation service at codemend.ai.
What We Collect
- Account information — GitHub username, email address, avatar URL (via GitHub or Google OAuth), or email/password if you sign up directly
- Error data — JavaScript error messages, stack traces, source URLs, browser information, and timestamps sent from your application
- Source code (temporary) — When you connect a GitHub repository, we read relevant source files only during error analysis. We do not store your full codebase.
- API keys — Your Codemend API key, and optionally your v0 API key (stored encrypted with AES-256-GCM)
- Payment information — Processed by Stripe. We do not store credit card numbers.
- Usage data — Error counts, analysis counts, plan usage, and feature interactions
How We Use Your Data
- Error messages and stack traces are sent to Anthropic (Claude AI) for analysis and fix generation
- Source code from your repos is read only when analyzing a specific error, then discarded
- We store AI-generated fixes (explanations, suggested diffs, fix prompts) in your account
- Notifications (email, Slack, Telegram, push) are sent based on your configured preferences
- Source maps you upload are stored to de-minify production stack traces
- We use usage data to enforce plan limits and improve the service
What We Do NOT Do
- We do not sell your data to third parties
- We do not use your code or error data to train AI models
- We do not store your full source code — only temporary access during analysis
- We do not change your code without your explicit approval (PR creation requires your action)
Third-Party Services
We share data with the following services to operate Codemend:
- Supabase — Database and authentication (hosted in AWS US East)
- Anthropic (Claude AI) — Error analysis and fix generation. Subject to Anthropic's Privacy Policy. API usage is not used for model training.
- GitHub (Octokit) — OAuth login, repository access, pull request creation
- Google — OAuth login (optional)
- Vercel — Application hosting
- Resend — Email notifications
- Stripe — Payment processing
- Cloudflare — DNS and CDN
Data Retention
- Error data and AI-generated fixes are retained in your account until you delete them
- Source maps are retained until you upload replacements or delete them
- Account deletion permanently removes all associated data within 30 days
- Backups may retain encrypted data for up to 90 days after deletion
Security
- All data is encrypted in transit using TLS 1.3
- Data at rest is encrypted via Supabase (AES-256)
- Sensitive keys (v0 API keys) are encrypted with AES-256-GCM before storage
- API keys are generated using cryptographically secure random bytes
- Row-level security (RLS) ensures users can only access their own data
Your Rights
You have the right to:
- Access — View all data associated with your account from the dashboard
- Correction — Update your account information in Settings
- Deletion — Request complete account and data deletion by emailing us
- Export — Request a copy of your data by emailing us
- Revoke access — Disconnect GitHub repos or revoke API keys at any time from Settings
For EU/EEA users: we process data under legitimate interest (providing the service you signed up for) and consent (optional integrations). You may withdraw consent at any time.
Cookies
We use essential cookies for authentication sessions only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
Children's Privacy
Codemend is not intended for use by anyone under 13 years of age. We do not knowingly collect data from children.
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or a notice on the dashboard. Continued use after changes constitutes acceptance.
Contact
Codemend is a product of Knod, Inc. For privacy questions, data requests, or concerns: