Privacy Policy

1. What We Collect

We collect the minimum data necessary to provide our services:

• Account information — Email address, name, and hashed password when you create an account. If you sign in with Google or GitHub, we receive your name, email, and profile picture from those providers.
• Authentication tokens — Session tokens and API keys stored locally on your device to maintain your login state.
• Usage metrics — Aggregate counts of cloud AI messages used (for plan limit enforcement). We do not log the content of your messages.
• Payment information — Processed by Stripe. We never see or store your full credit card number.

2. What We Do NOT Collect

• We do not collect, store, or transmit your source code, files, or project data.
• We do not log your AI conversation content.
• We do not track your browsing history or web activity.
• We do not use analytics cookies or third-party trackers on our products.
• We do not sell, rent, or share your personal data with third parties.

3. Local AI Inference

When you use local models in guIDE Desktop, all inference happens entirely on your device. No data is sent to any server. Your code, prompts, and AI responses never leave your machine. This is fully air-gapped.

4. Cloud AI Access

When you use cloud AI features (available in guIDE Desktop and Pocket guIDE), your prompts are routed through GraySoft Cloud to the selected AI provider (e.g., Google Gemini, OpenAI, Anthropic). We act as a passthrough:

• Your prompts are forwarded to the AI provider and the response is returned to you.
• We do not store the content of your prompts or responses.
• We log only the count and timestamp of requests for rate limiting and billing.
• Each AI provider has its own data handling policy which applies to the data they process.

5. Data Storage

• guIDE Desktop — All data (settings, chat history, files) is stored locally on your machine.
• Pocket guIDE — Session data and files are stored in your browser's local storage and IndexedDB. Nothing is sent to our servers.
• Account data — Email, hashed password, and subscription status are stored in our database hosted on secure infrastructure.

6. Third-Party Services

• Stripe — Payment processing. Subject to Stripe's Privacy Policy.
• Google OAuth — Sign-in authentication. Subject to Google's Privacy Policy.
• GitHub OAuth — Sign-in authentication. Subject to GitHub's Privacy Statement.
• AI Providers — When using cloud AI, your prompts pass through the selected provider. Each has its own data policy.

7. Your Rights

You can:

• Request a copy of the personal data we hold about you.
• Request deletion of your account and all associated data.
• Export your data at any time from your account dashboard.
• Opt out of cloud AI entirely by using only local models.

To exercise any of these rights, contact us at privacy@graysoft.dev or use the contact form.

8. Children's Privacy

Our products are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our products after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact GraySoft at: privacy@graysoft.dev