Privacy Policy

This Privacy Policy describes how AiTenzo - AI Bug Fixer ("we", "us", or "our") collects, uses, and shares information when you use our services.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, and password when you register.
• Code Submissions: Code you submit for AI analysis, stored to provide fix history.
• Payment Information: Processed by Razorpay. We do not store card details.
• Contact Messages: Messages sent through our contact form.

Automatically Collected Information

• Usage Data: Requests made, languages, modes, and tokens consumed.
• Log Data: IP address, browser type, pages visited, timestamps.
• Cookies: Session tokens and preference cookies (theme, currency).

2. How We Use Your Information

• To provide, maintain, and improve our AI debugging service.
• To process payments and manage subscriptions.
• To send transactional emails (receipts, password resets).
• To detect and prevent fraud, abuse, or Terms violations.
• To analyze usage patterns and improve our product.
• To respond to support requests.

3. Legal Basis for Processing (GDPR)

• Contract Performance: Processing necessary to deliver our service.
• Legitimate Interests: Security, fraud prevention, service improvement.
• Consent: Where we have obtained your explicit consent.
• Legal Obligation: Compliance with applicable laws.

4. Data Sharing

We do not sell your personal data. We share data only with:

• OpenAI: Code sent for AI analysis. See OpenAI Privacy Policy.
• Razorpay: Payment processing. See Razorpay Privacy Policy.
• Hosting Providers: Infrastructure providers who host the service.
• Legal Requirements: When required by law or to protect our rights.

5. Your Rights (GDPR)

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Receive your data in a machine-readable format.
• Restriction: Restrict processing in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time.

To exercise any right, contact us. We respond within 30 days.

6. Data Retention

• Account data: Retained while account is active. Deleted within 30 days of deletion request.
• Code history: Free: 30 days. Pro: 90 days. Unlimited: 1 year. You can delete anytime.
• Payment records: Retained 7 years for legal compliance.
• Logs: Retained 90 days for security.

7. Security

• HTTPS encryption for all data in transit.
• Bcrypt password hashing (cost 12).
• JWT authentication with 7-day expiry.
• Rate limiting and brute-force protection.
• Input sanitization against SQL injection and XSS.

8. Cookies

• abf_token: Authentication (essential, 7 days).
• abf_theme: Theme preference (functional, 1 year).
• abf_currency: Currency preference (functional, 1 year).
• gdpr_accepted: Cookie consent record (1 year).

9. Children's Privacy

Our service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect data from children.

10. Changes

We may update this policy periodically. We will notify you of significant changes via email or a prominent notice on our site.

11. Contact

Privacy questions? Contact us here.