Privacy Policy

Your privacy and code security are fundamental to everything we do. This policy explains how Codentium protects your data with our privacy-by-design approach.

Privacy First
Local Processing
GDPR Compliant

Last updated: January 1, 2025

Table of Contents

Overview

Codentium is built with a privacy-by-design philosophy. We believe that your source code, development workflows, and personal data should remain under your control. This Privacy Policy explains how we collect, use, process, and protect your information when you use the Codentium application.

Our Privacy Commitment
  • Local-first processing: Most AI operations can run entirely on your machine
  • Transparent data handling: You always see what data is sent to AI providers
  • User control: You decide what data to share and when
  • No surprise transmissions: Context Preview shows exactly what leaves your device
  • Minimal data collection: We only collect what's necessary for functionality

Information We Collect

2.1 Information You Provide Directly

  • AI Provider Credentials: API keys for services like OpenAI or Grok (stored locally and encrypted)
  • Configuration Settings: Editor preferences, keyboard shortcuts, theme selections
  • Project Metadata: Workspace paths, recently opened files (stored locally only)
  • Extension Data: Settings and data from installed extensions

2.2 Information Generated During Use

  • Editor Sessions: Open files, cursor positions, selection ranges (local storage only)
  • AI Interactions: Chat histories, code suggestions, refactoring requests (local unless sent to AI providers)
  • Performance Data: Application crashes, error logs (when crash reporting is enabled)
  • Usage Analytics: Feature usage patterns (only if telemetry is enabled, disabled by default)

2.3 Information We Do NOT Collect

  • We do not automatically scan or analyze your source code
  • We do not track your keystrokes or typing patterns
  • We do not access files outside your explicitly opened projects
  • We do not collect biometric data or personal identifiers
  • We do not use tracking cookies or third-party analytics by default

How We Process Your Data

3.1 Local Processing

The majority of Codentium's functionality operates entirely on your local machine:

  • Code editing and navigation: All file operations remain local
  • Syntax highlighting and LSP integration: Processed locally via language servers
  • Git operations: Direct interaction with your local Git repositories
  • Settings and preferences: Stored in local configuration files
  • Session management: Workspace state saved locally in .codentium directories

3.2 Optional Cloud Processing

Only when you explicitly use AI features with cloud providers, limited data is sent:

  • Code context: Only selected text or specified files
  • AI prompts: Your questions or refactoring requests
  • Project metadata: Language information, file types (not file contents unless specified)
Context Preview Feature

Before any data is sent to AI providers, the Context Preview pane shows you exactly what information will be transmitted. You can review, edit, or exclude any data before submission.

Local vs Cloud AI Processing

4.1 Local AI Processing (Ollama)

Benefits
  • Complete privacy - no data leaves your machine
  • Works offline
  • No usage costs or rate limits
  • Full control over model selection
  • Consistent response times
Considerations
  • Requires sufficient local hardware resources
  • Model capabilities may be limited compared to cloud services
  • Initial model download required

4.2 Cloud AI Processing (OpenAI, Grok, etc.)

Benefits
  • Access to state-of-the-art AI models
  • No local hardware requirements
  • Faster processing for complex tasks
  • Regular model updates and improvements
Privacy Considerations
  • Selected code/context sent to third-party servers
  • Subject to the privacy policies of AI providers
  • Requires internet connection
  • May incur usage costs

AI Provider Data Handling

When you choose to use cloud-based AI providers, please be aware of their data handling practices:

OpenAI

Data sent to OpenAI is subject to their privacy policy and terms of service. OpenAI may use data to improve their models unless you're using their API with data retention policies.

OpenAI Privacy Policy
Grok (X.AI)

Data sent to Grok is governed by X.AI's privacy practices. Please review their current data handling policies.

X.AI Privacy Policy
Ollama (Local)

When using Ollama, all processing occurs on your local machine. No data is transmitted to external servers.

Fully Private
Important Notice

Codentium provides transparency tools (Context Preview) to show you exactly what data will be sent to AI providers, but we cannot control how third-party services handle your data once transmitted. For maximum privacy, we recommend using local AI processing with Ollama.

Data Storage and Retention

6.1 Local Data Storage

All application data is stored locally on your device:

  • Configuration files: ~/.codentium/config/ (Linux/macOS) or %APPDATA%\Codentium\ (Windows)
  • Session data: .codentium/ folders in your project directories
  • AI conversation history: Stored locally unless you choose to delete
  • Extension data: ~/.codentium/extensions/
  • Logs: Temporary logs rotated automatically (configurable retention)

6.2 Data Encryption

  • API Keys: Encrypted using your system's credential manager (Keychain on macOS, Credential Manager on Windows, Secret Service on Linux)
  • Sensitive Settings: Encrypted before storage
  • Session Data: Stored in plain text locally (contains file paths and editor state)

6.3 Data Retention

  • Configuration: Persists until manually deleted or application uninstalled
  • Chat History: Retained locally until user deletion (configurable auto-cleanup available)
  • Logs: Automatically rotated (default: 7 days retention)
  • Telemetry: If enabled, aggregated locally and optionally shared (user controlled)

Your Privacy Controls

Codentium provides comprehensive privacy controls:

7.1 Data Transmission Controls

  • Context Preview: Review all data before AI submission
  • Provider Selection: Choose between local (Ollama) and cloud providers
  • Scope Limitation: Restrict AI context to current selection, file, or project
  • Manual Exclusions: Exclude sensitive files or directories from AI context

7.2 Application Settings

  • Telemetry Control: Enable/disable usage analytics (disabled by default)
  • Crash Reporting: Choose whether to send crash reports
  • Auto-Updates: Control automatic update checks and downloads
  • Network Access: Granular control over network permissions

7.3 Data Management

  • Clear Chat History: Delete AI conversation history
  • Reset Configuration: Return to default settings
  • Export Settings: Backup your configuration
  • Complete Uninstall: Remove all application data
Transparency

Always see what data will be transmitted

Granular Controls

Fine-tune every aspect of data sharing

Local First

Use fully local AI processing when desired

Data Deletion

Easily delete any stored information

Third-Party Services

8.1 Required Third-Party Services

  • Operating System Services: File system access, credential storage, notifications
  • Git Integration: Direct interaction with Git repositories (no external services)
  • Language Servers: Local LSP processes for code intelligence

8.2 Optional Third-Party Services

  • AI Providers: OpenAI, Grok, or custom API endpoints (user configured)
  • Update Services: GitHub releases API for update checking (if enabled)
  • Extension Registry: Optional extension marketplace (if used)
  • Telemetry Services: Anonymous usage analytics (opt-in only)

8.3 Third-Party Data Processing

Codentium does not share your personal data with third parties except:

  • When you explicitly choose to use cloud AI services
  • When you opt-in to crash reporting or telemetry
  • When required by law (we will notify you unless legally prohibited)

Security Measures

9.1 Data Protection

  • Encryption at Rest: Sensitive data encrypted using system credential managers
  • Encryption in Transit: All network communications use TLS/HTTPS
  • Access Control: Application data protected by operating system permissions
  • Secure Deletion: Sensitive data securely overwritten when deleted

9.2 Application Security

  • Code Signing: All releases digitally signed for authenticity
  • Sandboxing: Extensions run in isolated environments
  • Regular Updates: Security patches delivered through automatic updates
  • Vulnerability Reporting: Responsible disclosure program for security issues

9.3 AI Provider Security

  • API Key Protection: Keys encrypted and never logged
  • Request Isolation: Each AI request is independent
  • Context Validation: Data sanitized before transmission
  • Response Processing: AI responses processed securely
Security Vulnerability Reporting

If you discover a security vulnerability in Codentium, please report it to [email protected]. We appreciate responsible disclosure and will work with you to address any issues promptly.

Your Rights

You have comprehensive rights regarding your data when using Codentium. Since most data is stored locally, you have direct control over your information.

10.1 Data Access and Portability

  • Full Access: All your data is stored in accessible formats on your device
  • Export Settings: Export your configuration and preferences
  • Chat History Export: Export AI conversation histories in JSON format
  • Project Data: Direct access to .codentium folders in your projects

10.2 Data Correction and Deletion

  • Settings Modification: Change any application settings at any time
  • Selective Deletion: Delete specific chat histories or session data
  • Complete Reset: Reset application to factory defaults
  • Uninstall Cleanup: Remove all application data during uninstallation

10.3 GDPR Rights (EU Users)

Right to Information

This privacy policy and in-app transparency tools provide complete information about data processing.

Right of Access

Access all your data directly through the application or file system.

Right of Rectification

Modify any stored data through application settings or direct file editing.

Right of Erasure

Delete any or all data through application controls or by uninstalling.

Right to Object

Disable any data processing feature, including telemetry and AI services.

Right to Data Portability

Export your data in standard formats (JSON, plain text configuration files).

10.4 California Privacy Rights (CCPA)

For California residents, you have the right to:

  • Know what personal information is collected and how it's used
  • Delete personal information (available through app controls)
  • Opt-out of the sale of personal information (we don't sell personal information)
  • Non-discrimination for exercising your privacy rights

Policy Updates

11.1 When We Update This Policy

We may update this Privacy Policy to reflect:

  • Changes in our data processing practices
  • New features that affect privacy
  • Legal or regulatory requirements
  • Industry best practices

11.2 How We Notify You

  • In-App Notification: Prominent notice in the application
  • Email Notification: If you've provided an email for updates
  • Website Update: Updated policy posted at codentium.io/privacy
  • Version History: Previous versions available for comparison

11.3 Material Changes

For material changes that affect your privacy rights, we will:

  • Provide at least 30 days advance notice
  • Clearly explain what's changing
  • Allow you to opt-out of new data processing
  • Maintain previous privacy settings until you choose otherwise
Version History
January 1, 2025
Initial privacy policy for Codentium v1.0

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Privacy Inquiries

[email protected]

General privacy questions and data requests
Security Issues

[email protected]

Security vulnerabilities and concerns
General Support

[email protected]

Technical support and general questions
Open Source

github.com/codentium

Code contributions and issue reporting
Legal Entity

Codentium Development Team
Note: Update with actual legal entity information when established

Response Times
  • Privacy requests: We aim to respond within 3 business days
  • Security issues: Acknowledged within 24 hours
  • General inquiries: Response within 5 business days
  • GDPR/CCPA requests: Completed within legally required timeframes

Privacy Summary

Codentium is designed to protect your privacy while providing powerful AI-assisted development tools. Most processing happens locally, you control what data is shared, and transparency tools show you exactly what's happening with your information.

Local Processing Full Transparency User Control Encrypted Storage
95 Privacy Score

Based on privacy-first design principles