Privacy Policy
Last updated: September 24, 2026
In short
C2P is built for companies that give their developers AI models and API keys. It reports how those models are used - time, prompt counts, tokens and cost - so the company can manage them. It never reads or sends what you write: your code, prompts and the models' answers stay between your editor and the AI provider you chose. You can turn the reports off.
What never leaves your editor through C2P
- Your code, files and their contents.
- Your prompts, chat history and the AI models' answers. Requests go directly from VS Code to the AI provider you configured.
- Your AI provider API keys - stored in VS Code's encrypted secret storage, never sent to C2P.
- Keystrokes, clipboard, screenshots or anything outside the C2P panel.
Team usage reports (VS Code extension)
While you're linked to a team, the extension sends a small usage summary to your team's C2P server every few minutes - only if there was activity:
| Data | Why |
|---|---|
| Work email | The email you linked to your team, to attribute usage to the right person. |
| Team | The team your account belongs to. |
| Project name | The name of the open workspace folder - not its path or any file in it. |
| Active and idle time | How long the VS Code window was focused or not during each period. |
| Number of prompts | How many messages you sent to C2P - the count only, never the text. |
| Tokens per model | Input and output tokens per AI provider and model, to estimate the cost of the API keys. |
| Models available | Once a day, the names of the AI models your keys can reach, so the team model list stays current. |
The same list ships inside the extension as telemetry.json; run code --telemetry to see it together with VS Code's own.
How to turn reports off
- C2P follows VS Code's telemetry setting, as VS Code's extension guidelines require: with
telemetry.telemetryLevelset tooff, no reports are sent. - To turn off only C2P's reports, disable C2P › Team Usage Reporting (
c2p.teamUsageReporting) in VS Code's settings. - Changes apply immediately. Data from while reports were off is discarded, never sent later.
- Your company may ask you to keep reports on as part of its own policies for the AI keys it provides.
Accounts and the website
- Managers and admins: email and a hashed password for the dashboard, plus the teams they manage.
- Developers: email, team and a hashed device token that links the extension to the team.
- Team settings you save in C2P: team rules, custom instructions and slash commands.
- The website uses one essential cookie to keep you signed in to the dashboard. No advertising or tracking cookies.
Who can see it
Usage reports are visible to your team's managers and to the C2P administrator, to understand adoption and AI cost per developer, project and model. They aren't sold, shared with third parties or used for advertising. Your company, which invites you to its team, decides how it uses them; Kodffe runs the service for it.
Service providers
The service runs on Vercel (hosting) and MongoDB Atlas (database). The AI providers you configure (Anthropic, OpenAI, Google, DeepSeek) process your requests under their own privacy policies; C2P isn't in that path.
Retention and your rights
Account data is kept while the account exists. Usage reports are kept to show usage over time. You can ask to access, correct or delete your data through your team manager or by contacting us. Uninstalling the extension or turning reports off stops any further collection.
Contact
C2P is provided by Kodffe - kodffe.com.