Privacy Policy

Effective Date: July 23, 2026

At N3MO Code Intelligence ("Company", "we", "us", or "our"), your privacy and the security of your intellectual property are our highest priorities. This Privacy Policy outlines how we collect, use, and protect your information.

1. Information We Collect

We only collect the absolute minimum data required to operate the Service:

• Account Data: When you authenticate via GitHub, we collect your GitHub Profile ID, username, email address, and avatar URL.
• Payment Data: Payment processing is handled entirely by our secure third-party provider, Razorpay. We do not store or process your credit card numbers on our servers.
• Usage Telemetry: For SaaS users, we collect anonymized metrics regarding indexing speed and request counts to enforce subscription limits and monitor system health.

2. Strict Code Processing Policy

Our entire infrastructure is designed around the principle of "Zero Stored Source Code".

• Ephemeral SaaS Processing: When a Pull Request is analyzed, your code is securely cloned into an isolated, ephemeral GitHub Action runner. The code is parsed in-memory to extract structural dependencies. Once the analysis is complete, the runner and the cloned source code are instantly and permanently destroyed.
• Metadata Storage: We only store the resulting structural Abstract Syntax Tree (AST) metadata (e.g., function definitions, line numbers, caller relationships) in our PostgreSQL database. Your raw proprietary source code text is never stored in our databases.
• Enterprise (BYOR): If you use our Enterprise Zero-Trust tier, the processing happens entirely within your Virtual Private Cloud. We have zero access to your code or metadata.

3. Information Sharing and Subprocessors

We will never sell or rent your personal information to third parties. We only share information with trusted subprocessors required to run the service:

• GitHub: For OAuth authentication, Webhooks, and ephemeral Action runners.
• Razorpay: For secure payment processing and subscription management.
• Hosting Providers: Our API and databases are hosted on highly secure, compliant infrastructure (e.g., Vercel, Supabase, or AWS).

4. Security Practices

We employ industry-standard security measures, including HTTPS encryption in transit, encrypted databases at rest, and strict JWT-based authentication. We regularly audit our systems to prevent unauthorized access.

5. User Rights (GDPR & CCPA)

You have the right to access, update, or delete your personal information at any time. If you cancel your subscription, you may request the immediate deletion of all your associated AST metadata and account records by contacting us.

6. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: workraj345@gmail.com.