Privacy Policy

1. Introduction

ExplainThisCode ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered code explanation service at explainthiscode.ai (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and password when you create an account.
• Code Snippets: Code you submit for explanation. We process this to provide our service.
• Payment Information: Billing details processed securely through Stripe. We do not store full credit card numbers.
• Communications: Information you provide when contacting support.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and interaction patterns.
• Device Information: Browser type, operating system, and device identifiers.
• Log Data: IP address, access times, and referring URLs.
• Cookies: See our Cookie section below.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process code explanations using AI models
• Process payments and prevent fraud
• Send transactional emails (account verification, password reset)
• Respond to your inquiries and support requests
• Analyze usage patterns to improve user experience
• Detect and prevent security incidents
• Comply with legal obligations

4. Code Data Handling

We understand that code can contain sensitive information. Here's how we handle it:

• Processing: Code is sent to AI providers (OpenAI, Anthropic) for explanation generation.
• Storage: Explanations are stored to provide history features. You can delete your explanations at any time.
• No Training: We do not use your code to train AI models.
• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

5. Data Sharing

We share your information only in these circumstances:

• Service Providers: With third parties that help operate our Service (hosting, payment processing, AI providers).
• Legal Requirements: When required by law or to protect our rights.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Consent: With your explicit permission.

Our Service Providers

• Supabase: Database and authentication (EU/US)
• Vercel: Hosting and edge functions (Global CDN)
• Stripe: Payment processing (PCI DSS compliant)
• OpenAI: AI model provider for code explanations
• Sentry: Error monitoring and performance
• PostHog: Product analytics

6. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and security.
• Functional Cookies: Remember your preferences (theme, language settings).
• Analytics Cookies: Understand how you use our Service (with your consent).

You can manage cookie preferences through our cookie consent banner, your account settings, or your browser settings. See our Cookie Policy for a complete list of cookies we use.

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data.
• Correction: Update inaccurate or incomplete data.
• Deletion: Request deletion of your account and data.
• Portability: Receive your data in a structured format.
• Objection: Object to certain processing activities.
• Restriction: Request limited processing of your data.

To exercise these rights, contact us at privacy@explainthiscode.ai or use the account deletion feature in your dashboard settings.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we remove personal data within 30 days, except where retention is required for legal, accounting, or security purposes. Anonymous, aggregated data may be retained indefinitely for analytics.

9. Security

We implement industry-standard security measures including encryption, access controls, regular security audits, and secure development practices. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any security incidents.

10. International Transfers

Your data may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required by GDPR.

11. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our Service. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: