Privacy Policy

1. Introduction

Welcome to CodeFlow Lab ("we," "our," or "us"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered development platform.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Profile information (organization name, profile picture)
• Payment information (processed securely through Stripe)
• Communication data (support requests, feedback)

2.2 Automatically Collected Information

When you use our platform, we automatically collect:

• Usage data (features used, time spent, interactions)
• Device information (browser type, operating system, IP address)
• Log data (access times, pages viewed, errors)
• Cookies and similar tracking technologies

2.3 Project and Code Data

We collect and store the projects, code, and files you create or upload to our platform, including:

• AI-generated code and projects
• Figma designs and converted components
• Agent configurations and workflows
• Custom templates and libraries

3. How We Use Your Information

We use your information for the following purposes:

• To provide, maintain, and improve our services
• To process your transactions and manage your account
• To generate AI-powered code and convert Figma designs
• To communicate with you about updates, security alerts, and support
• To analyze usage patterns and optimize platform performance
• To detect, prevent, and address technical issues or fraud
• To comply with legal obligations and enforce our terms

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our platform:

• OpenAI - AI code generation and analysis
• Canvas8.io - Figma design to code conversion
• Stripe - Payment processing
• Google Cloud Storage - File storage
• Neon Database - Data hosting
• Resend - Email delivery

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure password hashing using bcrypt
• Session management with secure cookies
• Rate limiting and DDoS protection
• Regular security audits and monitoring
• Access controls and authentication mechanisms

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing

To exercise these rights, please contact us at marcello.cultrera@apricuseight.com

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Necessary Cookies: Maintain your session and keep you logged in (always enabled)
• Analytics Cookies: Analyze platform usage and performance via Google Analytics (requires consent)
• Marketing Cookies: Targeted advertising and campaign measurement (not currently used)

You can manage your cookie preferences at any time using the button below. Note that disabling necessary cookies may affect platform functionality.

9. Third-Party Services

Our platform integrates with third-party services (Google OAuth, GitLab, etc.). These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

10. Children's Privacy

Our platform is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: