1. Data Controller & Scope

This Privacy Policy explains how CodeTea ("we," "us," or "our") collects, utilizes, safeguards, and shares your personal information when you access codetea.io, our APIs, plugins, and any associated digital services (collectively, the "Platform").

Under global data protection frameworks (such as the GDPR in Europe, CCPA in California, or LGPD in Brazil), CodeTea acts as the primary data controller for the personal information processed as described in this document. We are committed to transparency, and we want to assure you that we absolutely do not use your data for AI training, nor do we sell or share your data with any third parties for commercial or advertising purposes.

2. Legal Grounds for Processing

We only collect and process the absolute minimum data required to make our Platform function. Specifically, we collect basic profile information (name, email, avatar) when you log in via Google to create your account, and we store your input/output files strictly so you can view your conversion history. We process this data based on your explicit consent when you choose to use our service, and our need to fulfill our core service to you. You have full control over your data and can delete your files or your entire account at any time.

3. How Your Data is Utilized

The information we collect is used strictly to operate and secure our Platform. This includes processing transactions, generating the AI outputs you request, verifying identities to prevent fraud, and sending important transactional notifications.

We strictly do not sell your personal information. Furthermore, we do not engage in sharing your data for cross-context behavioral advertising.

4. AI Training Policy

Your privacy remains our priority when interacting with our AI systems:

• We absolutely do not use your personal files, prompts, or generated assets to train, fine-tune, or improve any AI models under any circumstances.
• Data transmitted to our infrastructure is processed transiently solely to deliver your desired output and is never absorbed into a permanent dataset.

5. Data Sharing & Third Parties

CodeTea never sells or shares your personal data with third parties for commercial, advertising, or marketing purposes.

To operate our Platform effectively (such as generating code or hosting files), we securely transmit data to trusted service providers ("Sub-processors"), including cloud infrastructure and AI API hosts. These partners are strictly bound by legal contracts: they only process your data to fulfill your specific requests and are strictly prohibited from storing, sharing, or using your data to train their own AI models.

6. Retention Periods

We only retain your data for as long as necessary. Transient processing files are automatically wiped shortly after generation. Account-level data and saved projects are kept active for the lifespan of your account. Upon account deletion, we purge your data within a standard grace period, except for essential billing records which must be retained longer for tax compliance.

7. Your Privacy Rights

No matter where you reside, CodeTea grants you control over your data. You possess the right to:

• Request access to the personal data we hold about you;
• Correct inaccuracies within your profile;
• Demand the deletion of your account and associated data (the "right to be forgotten");
• Withdraw any previously given consent for marketing or specific processing activities.

To exercise these rights, please contact our privacy team at support@codetea.io. We aim to fulfill all verified requests promptly within legally required timeframes.

8. Cookies & Tracking

We utilize cookies (and similar local storage technologies) strictly to maintain your active session when you log in via Google (essential), and to understand how users navigate our site via Google Analytics (analytics). You can adjust your tracking preferences at any time through your browser settings.

9. Security Measures

We implement rigorous technical safeguards, including transport-layer encryption (TLS), robust database encryption at rest, role-based access restrictions, and continuous system monitoring. While we strive to protect your data with industry-best practices, no digital system is completely immune to risks.

10. Age Restrictions

CodeTea is not designed for children. You must meet the minimum age of digital consent in your jurisdiction (typically 13 to 16 years old) to use our Platform. If we discover we have inadvertently collected data from a minor without proper authorization, it will be deleted immediately.

11. Policy Updates

As our platform evolves, so might this Privacy Policy. Should we make material modifications regarding how we handle your data, we will notify you in advance via email or an in-app alert.

12. Get in Touch

For any questions regarding your privacy, data security, or to exercise your rights, please reach out to our dedicated teams:

• Support Team: support@codetea.io