Privacy Policy

This Privacy Policy explains how Predixtions Inc. d/b/a AgentFoundry ("AgentFoundry", "we", "us") collects, uses, shares, and protects information in connection with the AgentFoundry desktop application, the codenow.pro website, and related services (the "Services"). It applies to anyone who uses or interacts with the Services.

1. Summary

AgentFoundry is a local-first desktop IDE. Most of what you do happens on your machine. We try to keep our data footprint small and we don't sell your information. The most important things to know:

• Your code, prompts, and files do not leave your computer except when you ask us to send them to an AI provider (Anthropic, OpenAI, Google, GitHub, etc.) for inference. When that happens, we transmit them in real time and do not store them on our servers.
• We do not use your code or prompts to train any AI model. Your data is not added to any general-purpose training set.
• Recordings of agent runs (the JSONL files in {project}/.codenow/runs/) are stored on your local disk, not on our servers, unless you explicitly publish them to a service like Agent21.
• We collect basic account information (email, name, plan), payment information (handled by Stripe — we never see your full card number), and usage telemetry (which features are used, app version, error reports) to operate and improve the Services.
• We retain personal data only as long as necessary, and you can request deletion at any time at legal@codenow.pro.

2. Information We Collect

2.1 Information you provide directly

• Account information. Email address, name, optional company, password (hashed), role, and plan tier.
• Payment information. Processed by Stripe. We receive a customer ID, masked card details, and billing history; we never receive or store full card numbers.
• Support and feedback. Anything you send us via email, in-product feedback, or our admin / community channels.

2.2 Information generated as you use the Services

• Local content. Source code, prompts, agent manifests, knowledge bundles, skills, guardrail configurations, and run recordings. This content lives on your local disk under your home directory and project folders (for example, ~/.codenow/, {project}/.codenow/) and is not sent to our servers as part of normal operation.
• Usage telemetry. Anonymized event data (which features are opened, app version, OS version, basic performance metrics, error reports). You can opt out in app settings.
• Authentication metadata. Sign-in timestamps, last-active time, IP address (truncated for analytics), and session tokens.

2.3 Information transmitted on your request

• Prompts and code sent to AI providers. When you invoke a model or agent, the prompt, relevant code, and context you have selected are transmitted in real time to the AI provider you have chosen (see Section 4).
• Marketplace and observability data. If you choose to publish an agent to Agent21 or wire your installation to TrustModel.ai, the data necessary for that integration is transmitted to those services with your consent.

2.4 Information we do not collect

• The contents of files you have not opened, edited, or processed in the Services.
• Keystrokes outside the application.
• Screenshots, microphone, or camera input.
• Browsing history outside the Services.

3. How We Use Information

We use the information described above to:

• Operate, maintain, and provide the Services to you;
• Authenticate your account and prevent fraud or abuse;
• Process payments and manage subscriptions;
• Diagnose and fix bugs, monitor performance, and improve the product;
• Communicate with you about your account, security, billing, and product updates;
• Respond to support requests;
• Comply with legal obligations and enforce our Terms.

We do not sell personal information, and we do not share it with third parties for their independent advertising or marketing purposes.

4. How We Handle Your Code and Prompts (AI Providers)

The Services let you choose among multiple third-party AI providers. When you invoke a model or agent, the relevant prompt, code, and context are transmitted in real time to the AI provider you selected. We do not retain copies of those payloads on our servers as part of normal operation.

Each AI provider is independently responsible for handling the data it receives, subject to its own privacy policy and data-processing terms. You should review the policies of any provider you enable. The relationship between you and each provider is established by the API key (or OAuth credential) you provide; you are the customer of that provider for purposes of their terms.

Privacy mode and zero data retention. Where an AI provider offers a "no-training" or "zero data retention" option (for example, Anthropic's standard API terms or OpenAI's API platform default), we use it where we have control over the configuration. You are still responsible for verifying and configuring privacy settings on the AI-provider account that owns the API key.

We never use your code or prompts to train an AI model owned by us, and we do not contribute them to any general-purpose model training set operated by a third party without your separate, explicit written consent.

5. When We Share Information

We share personal information only:

• With service providers ("subprocessors") who help us operate the Services under written contract, listed in Section 6;
• With AI providers you have chosen, only when you invoke a model or agent;
• To comply with law, valid legal process, or a binding government request;
• To protect rights, property, or safety of AgentFoundry, our users, or others;
• In connection with a merger, acquisition, financing, or sale of assets, in which case we will require the acquiring entity to honor this Privacy Policy or notify you of any changes;
• With your explicit consent.

6. Subprocessors

We use the following service providers ("subprocessors") to operate the Services. Each is contractually obligated to handle your data only on our instructions and to maintain appropriate security:

We will provide notice of material additions to this list before the additions take effect. You can request the current list at legal@codenow.pro.

7. Data Retention

We retain personal data only for as long as necessary to provide the Services or to meet the legal, accounting, or reporting obligations described below.

• Account data. Retained while your account is active. After deletion, we remove or anonymize personal identifiers within 30 days, except where retention is required by law (such as for tax records, typically up to 7 years).
• Code and prompts sent to AI providers. Not retained by us; subject to each provider's own retention policy.
• Usage telemetry. Aggregated or pseudonymized within 90 days; raw event records retained for diagnostic purposes for up to 12 months.
• Billing records. Retained for 7 years to satisfy financial-recordkeeping requirements.
• Local files (run recordings, skills, etc.). Stored only on your device. Deletion is fully under your control.

8. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including:

• Encryption in transit (TLS 1.2+) and at rest for data we store;
• Encrypted storage of API keys and access tokens via your operating-system keychain (Keychain on macOS, Credential Manager on Windows, libsecret on Linux);
• Row-level security on database tables containing user data;
• Role-based access controls within our team;
• Routine security review and dependency monitoring;
• Hardened-runtime, code-signed, and Apple-notarized desktop binaries.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and applicable regulators in accordance with applicable law.

9. Your Rights and Choices

Depending on where you live, you may have the following rights with respect to your personal data:

• Access — request a copy of the personal information we hold about you;
• Correction — ask us to correct inaccurate or incomplete data;
• Deletion — ask us to delete your personal information, subject to limited exceptions;
• Portability — receive your information in a structured, machine-readable format;
• Objection / restriction — object to or restrict certain processing;
• Withdraw consent — where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, email legal@codenow.pro. We may need to verify your identity before acting on a request. We will not discriminate against you for exercising these rights.

10. Cookies and Tracking

The codenow.pro website uses a small number of essential cookies for authentication and session management. We may use first-party analytics cookies to understand traffic patterns. We do not use third-party advertising cookies, and we do not sell or share browser activity for cross-context behavioral advertising. The desktop application does not use cookies.

11. Children

The Services are not directed to children under 13 (or 16 in jurisdictions where 16 is the minimum age). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at legal@codenow.pro and we will delete it.

12. International Data Transfers

We are based in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States and other countries where our subprocessors operate. Where required, we use Standard Contractual Clauses or other appropriate safeguards for cross-border transfers of personal data.

13. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you specific rights regarding your personal information. In the preceding 12 months, we have collected the categories of personal information described in Section 2 for the purposes described in Section 3, and we have shared personal information with the categories of recipients described in Sections 5 and 6. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

You may exercise your CCPA rights — including the right to know, delete, correct, and limit use of sensitive personal information — by emailing legal@codenow.pro. You may designate an authorized agent to act on your behalf, subject to our verification of identity.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (in-product, by email, or by posting an updated version on our site) before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

15. Contact Us