FREN
Sign inGet started

Privacy Policy

Last updated: October 7, 2026.

1. Data controller

Charley Cerdan, sole trader, 5 rue du Vercors, 26300 Bésayes, France (SIRET 883 304 743 00023), is the data controller for personal data collected via code-agents-orchestrator.app and the CodeAgentsOrchestrator application. For any question about your data: privacy@code-agents-orchestrator.app.

2. Data we collect

  • Account: name, email address, password (stored hashed, never in plain text).
  • Payment: fully handled by Stripe; we never store card details, only your Stripe customer id and subscription status (active, canceled, period dates).
  • Desktop app sign-in: OAuth tokens (access/refresh) that let the desktop app verify your subscription, stored server-side and in your OS's secure keychain on the client.
  • Signed-in devices: a "hostname (OS)" label tied to each desktop-app sign-in, shown in your account.
  • Bug reports: the text and screenshots you choose to send from the app or the site.
  • Crash reports: only if you accept them in the app; they are anonymous and can be changed at any time in Settings.
  • Usage statistics: only if you accept them, on the site (page views, sign-up) and in the app (a single "first agent launched" event), tied to your account id. No code, prompt or file content is sent. You can change your mind at any time.
  • Technical data: IP address and server logs, kept temporarily for security and technical diagnostics.

We collect no data about the content of your work: conversation history, diffs, and your project's code stay stored locally on your machine and are never sent to our servers.

3. Purposes and legal bases

  • Creating and managing your account — performance of a contract.
  • Providing app access and license checks — performance of a contract.
  • Billing and payment — performance of a contract and legal (accounting) obligation.
  • Security, fraud prevention, technical logging — legitimate interest.
  • Sending transactional emails about your account and purchases — performance of a contract.
  • Measuring site and app usage to improve the product — consent.
  • Responding to support requests — legitimate interest / performance of a contract.

4. Who we share data with

Your data is processed by the following processors, strictly as needed to run the service:

  • Stripe, Inc. (USA) — payment processing, covered by standard contractual clauses.
  • OVH SAS (France) — hosting for the site and database.
  • Resend — sending transactional emails (welcome, password reset, purchase confirmation).
  • Sentry — receiving anonymous crash reports, only if you have accepted them.
  • PostHog (hosted in the European Union) — usage statistics, only if you have accepted them.
  • GitHub, Inc. (USA) — hosting the app's installer files, covered by standard contractual clauses.

We do not sell or rent your personal data to third parties.

5. Retention

  • Account data: kept while your account is active, deleted within 30 days of a deletion request.
  • Billing records: kept for 10 years, per French accounting law.
  • Technical logs: kept for at most 12 months.

6. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data.

You also have the right to lodge a complaint with the CNIL (the French data protection authority) or your own country's supervisory authority.

7. Cookies

We only use cookies strictly necessary for the site to work: an authentication session cookie and a language-preference cookie; these don't require prior consent under ePrivacy rules. No advertising cookies are used. If you accept usage statistics, an anonymous id is kept in your browser's local storage; without your consent, nothing is stored or sent.

8. Security

The site is served over HTTPS only, passwords are hashed, and payment data handling is delegated to Stripe, which is PCI-DSS Level 1 certified.