Privacy Policy

What stays on your machine

• Your AI provider API keys - stored in VS Code's encrypted secret storage, never sent to C2P.
• Your code, files, prompts, chat history and the models' answers. Requests go directly from your editor to the AI provider you chose.

What C2P collects

• Account data: for managers and admins, email and a hashed password; for developers, email, team and a hashed device token that links the extension to the team.
• Team activity metrics sent by the extension every few minutes: time the editor was active and idle, number of prompts, tokens used per AI provider and model, and the name of the open project folder. From these, the dashboard estimates cost. No code, prompts or answers are included.
• Model availability: the names of the AI models your keys can access, used to keep the team's model list current.
• Settings you save in C2P: team rules, custom instructions and slash commands.

Who can see it

Team activity metrics are visible to your team's managers and to the C2P administrator, to understand adoption and AI cost per developer, project and model. They aren't sold or shared with third parties, and aren't used for advertising.

Service providers

The service runs on Vercel (hosting) and MongoDB Atlas (database). The AI providers you configure process your requests under their own privacy policies.

Retention and your choices

Account data is kept while the account exists. Activity metrics are kept to show usage over time. Ask your team manager, or contact us, to access or delete your data. Uninstalling the extension stops any further collection.

Contact

C2P is provided by Kodffe - kodffe.com.