Privacy Policy
rckt corp. ("we", "our", or "us") operates Codae and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use the Codae web application at codae.app, with native Mac and iOS clients planned (collectively, the "Service").
1. Information We Collect
We collect only the minimum information necessary to provide the Service:
- Account information — your email address and subscription status, provided during sign-up.
- Usage data — anonymised, aggregated metrics such as feature usage counts. No personally identifiable information is included.
- Crash reports — opt-in diagnostic data to help us fix bugs. Crash reports do not include your credentials, workspace contents, or agent outputs.
- Payment data — billing is handled by Stripe. We never see or store your full credit card number.
2. Information We Do Not Collect
- We do not read, store, or analyse your connector or MCP API keys, tokens, or credentials on our application servers. Those secrets are encrypted and held in our server-side secrets vault (OpenBao) behind the Connectors API, and the Codae client never stores or has access to them directly. The only credentials kept on your device are a short-lived Codae session token and, if you connect one, your GitHub OAuth token, both held in platform-secure storage rather than as plain files on disk.
- We do not read, store, or analyse the contents of your agent sessions, prompts, or outputs.
- We do not sell, rent, or trade your personal information to third parties.
3. How We Use Your Information
- To provision and maintain your subscription.
- To send transactional emails (receipts, password resets, important service notices).
- To diagnose and fix crashes and performance issues.
- To comply with legal obligations.
4. Data Retention
Account information is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Anonymised aggregate metrics may be retained indefinitely.
5. Third-Party Services
We use the following third-party processors to operate the Service, each bound by their own privacy policies:
- Anthropic — AI model provider (anthropic.com/legal/privacy).
- OpenAI — AI model provider (openai.com/privacy).
- Cursor — coding agent provider (cursor.com/privacy).
- OpenCode — coding agent provider (opencode.ai).
- GitHub (Microsoft) — source code access and OAuth sign-in (github.com privacy statement).
- Stripe — payment processing (stripe.com/privacy).
- Cloudflare — delivers codae.app, including the Service, and protects it from attacks. It is described with this website's services in section 6.
The Codae app also sends selected workspace and agent-session usage events to PostHog from macOS, Android, and iOS, only after you opt in under Settings. App analytics is off by default; PostHog session replay and automatic error capture are disabled there as well. Session replay is disabled on every Codae app surface, including Flutter web and desktop, and on the device sign-in page: the app can show prompts, agent output, terminals, account information, and workspace content, and those surfaces remain excluded until a reviewed masking and screen-approval process is in place.
Separately, if you choose to connect a third-party account — for example your own Google Drive or Notion account — through the Service's connectors, that provider acts on your instructions as a service you authorize, not as our processor. Your use of a connected account is governed by that provider's own terms and privacy policy, and you can disconnect it at any time from the Service's settings.
6. This Website and Your Choices
This website (codae.app's home page, this policy, the Terms of Service and the device sign-in page) is delivered through Cloudflare, which is always on because the site cannot be delivered without it. It can also use three optional services, only on the home page and only after you allow them: PostHog for product analytics, Microsoft Clarity for session replay, and Cloudflare Web Analytics for performance measurement. None of them runs on this policy, the Terms of Service, device sign-in or inside the Codae app, or loads before you make a choice.
- Your choice. On your first visit a banner offers "Reject all", "Accept all" and "Manage choices", where you can allow each purpose separately. Until you choose, nothing optional loads.
- How it is kept. Your choice is stored in this browser's local storage (under
rckt.consent), not on our servers. We ask again after 12 months, or sooner if this policy changes in a way that affects your choice. - Global Privacy Control. If your browser sends the Global Privacy Control signal and you have not chosen yet, we treat it as "Reject all": no banner is shown and nothing optional loads. If you later allow a service yourself, that choice is kept.
- Changing your mind. Use the "Privacy choices" link at the bottom of every page. Turning a service off stops it, removes the cookies and storage it keeps in this browser, and reloads the page if a session replay was running. Other tabs of this site that you have open follow the change.
Services this website uses
Controller: rckt corp., based in Ontario, Canada.
Cloudflare
Delivers this website and the Codae service at codae.app, and protects them from abuse and attacks.
- Consent
- Always on, because the site needs it
- What it collects
- The network address, request headers and requested address of every request, which any web request reveals
- Security cookies that Cloudflare sets where its bot protection is turned on
- If a page fails to load, a report about the failure that your browser may send to Cloudflare (Network Error Logging)
- What it does not collect
- Product analytics, error diagnostics, session replay or performance measurement, which are the separate services listed here
- Where it runs
- Every request to codae.app, including this website and the Codae web app
- Where the data is stored
- Cloudflare's global network, starting at the data centre nearest you. Cloudflare stores the information it keeps mainly in the United States and the European Economic Area.
- How long it is kept
- Cloudflare keeps no request logs for us: retention of HTTP request logs is off unless a site turns it on, and ours do not. Cloudflare keeps its own records for as long as its business purposes require, as its privacy policy describes; it gives no fixed period.
- Privacy policy
- Cloudflare privacy policy
- How to opt out
- None: the site cannot be delivered without it.
Cloudflare Web Analytics
Measures how many pages load and how fast they load.
- Consent
- Off until you allow performance measurement
- What it collects
- The page address, referrer and page load timings
- Browser and device details from the user agent
- The network address of the request, which any web request reveals
- What it does not collect
- Cookies or other storage on the device
- Anything before you allow performance measurement
- Anything when the page you came from had a query string or fragment in its address
- Where it runs
- The home page of this website (codae.app/), with no query string or fragment in its address, after you allow performance measurement
- Where the data is stored
- Cloudflare's global network, starting at the data centre nearest you. Cloudflare stores the information it keeps mainly in the United States and the European Economic Area.
- How long it is kept
- Every page load for 7 days, then a sample of about 10% for longer-term reports, which cover the previous six months.
- Privacy policy
- Cloudflare Web Analytics privacy policy
- How to opt out
- Turn off Performance measurement in Privacy choices.
PostHog
Counts how the site is used, so we can improve it.
- Consent
- Off until you allow product analytics
- What it collects
- A view of the home page, and clicks on its sign-up and contact sales buttons, naming which kind of button
- Release and environment labels for the site
- A random identifier kept in page memory only, so it does not carry over between visits
- A flag in local storage recording that you allowed product analytics, removed when you turn it off
- The network address of the request, which any web request reveals
- What it does not collect
- Automatic capture of clicks, rage clicks, dead clicks, heatmaps or typing
- Console logs, network timings, performance data or errors captured automatically
- Session recordings
- Surveys, experiments, product tours or chat, and the extra code PostHog would load for them
- Feature flag or remote configuration requests
- Person profiles
- A PostHog identifier stored on the device
- Anything before you allow product analytics
- The page address, referrer, browser or device details: the site removes them before an event is sent
- Anything when the page you came from had a query string or fragment in its address
- Where it runs
- The home page of this website (codae.app/), with no query string or fragment in its address, after you allow product analytics
- Where the data is stored
- European Union: PostHog's EU Cloud, hosted in Frankfurt, Germany.
- How long it is kept
- 1 year.
- Privacy policy
- PostHog privacy policy
- How to opt out
- Turn off Product analytics in Privacy choices. Its storage and cookies are removed.
Microsoft Clarity
Records how people use the pages where the site uses session replay, with form fields and editable text masked, so we can see where people get stuck.
- Consent
- Off until you allow session replay
- What it collects
- Mouse movement, clicks, scrolling and page layout on those pages
- Page text that is not masked
- Browser, device and screen details
- Two Clarity cookies (_clck and _clsk) that recognise the browser and the visit
- The network address of the request, which any web request reveals
- What it does not collect
- Anything on other pages, on any address with a query string, or on any address with a fragment other than a plain anchor (such as #install)
- What you type into forms or editable regions, which are masked
- Advertising storage, which is denied
- Anything before you allow session replay
- Anything when the page you came from had a query string or fragment in its address
- Where it runs
- The home page of this website (codae.app/), with no query string or fragment in its address, after you allow session replay
- Where the data is stored
- Microsoft Azure. Microsoft does not name the location; it may store and process data in your region, in the United States or in other countries where it operates.
- How long it is kept
- 30 days from the visit, except favourite recordings and a random sample of recordings, which are kept for up to 9 months.
- Privacy policy
- Microsoft Clarity privacy policy
- How to opt out
- Turn off Session replay in Privacy choices. Its cookies are removed, on whichever page you do it, and the page reloads if a recording was running.
7. Security
We use industry-standard measures including TLS in transit and AES-256 at rest for any data we do hold. Connector and MCP credentials are encrypted at rest in our server-side vault and are transmitted only over TLS between our backend and the connected provider; the Codae client itself never stores or sees them. The session token and GitHub OAuth token kept on your device are held in platform-secure storage.
8. Children
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
10. Contact Us
Questions about this Privacy Policy? Email us at [email protected].