Privacy Policy
Last updated: October 4, 2026
1. Data Controller
aicoding.inc is operated by Synovanta INC, a corporation organized under the laws of the State of Wyoming, USA (Entity ID: 2026-002046033; registered address: 30 N Gould St Ste R, Sheridan, WY 82801, USA). Synovanta INC is the data controller of the personal information described in this policy. Privacy contact: support@aicoding.inc. We have not appointed a Data Protection Officer (DPO).
2. Information We Collect
(1) Account information: email address, username and a hashed password; if you sign in with Google or GitHub, the name, email and avatar provided by that platform; (2) order information: order number, amount, payment method and payment time, plus the invoicing details you provide if you request an invoice; (3) usage data: API call records (model, token usage, time, status code and error messages); (4) technical information: IP address, browser type, device and operating system information, and a browser fingerprint used for fraud prevention; (5) communications: the content you provide when you contact us by email or other channels; (6) optional information: push subscription data if you allow browser push notifications. Payment card data is processed directly by our payment processors and is not stored on our servers.
3. How We Use Information and Legal Bases
(1) Providing the Service, managing accounts and processing API requests: performance of a contract; (2) processing payments, invoices and refunds: performance of a contract and legal obligation; (3) preventing fraud and abuse and securing accounts: legitimate interests; (4) sending billing, security and service-change notices: performance of a contract; (5) analytics to improve the website and Service: your consent; (6) sending offers and marketing messages: your consent, or our legitimate interest for existing customers; you can unsubscribe at any time; (7) complying with tax, accounting and other legal requirements: legal obligation.
4. Cookies and Tracking
(1) Strictly necessary cookies: used for sign-in, security and language preferences; these cannot be turned off; (2) analytics cookies: we use Baidu Analytics (Baidu Tongji) to understand website traffic; (3) marketing tracking: we use Baidu Ads conversion tracking to measure advertising performance. Baidu's privacy policy: https://privacy.baidu.com/policy. You can refuse or delete analytics and marketing cookies in your browser settings without affecting basic use of the website.
5. Sharing and Disclosure
We do not sell your personal information, including "selling" as defined by applicable laws such as the CCPA. We share only the information necessary in these cases: (1) payment processors: payment card data is processed exclusively by our PCI-DSS compliant payment processors, Waffo Pancake and Stripe; (2) AI model providers: the content of your API requests is sent to the relevant third-party model provider (such as Anthropic or OpenAI) to generate a response; (3) infrastructure providers: such as Cloudflare (network and security) and our cloud server providers; (4) analytics and advertising services: Baidu Analytics and Baidu Ads as described in Section 4; (5) legal requirements: when required by law or a lawful request from a government authority; (6) business transfers: in a merger, acquisition or asset transfer, the recipient must continue to honor this policy.
6. Data Security
We protect your information with TLS encryption across the site, hashed password storage, least-privilege access controls for internal staff, and by not storing payment card data on our servers. If a data breach that may affect your rights occurs, we will notify you and the relevant supervisory authorities as required by law within 72 hours of becoming aware of it.
7. Data Retention
(1) Account information: kept while your account is active and deleted or anonymized within 90 days after account closure; (2) order, transaction and invoice records: kept for 7 years to meet tax and accounting obligations; (3) API request logs: kept for up to 30 days; (4) communications: kept for 2 years after the last contact. Where the law requires otherwise, we follow the law.
8. Your Rights
Under applicable laws such as the EU GDPR, you have the right to: (1) access; (2) rectification; (3) erasure; (4) restriction of processing; (5) data portability; (6) object; (7) withdraw consent (without affecting the lawfulness of prior processing); (8) not be subject to decisions based solely on automated processing. To exercise these rights, email support@aicoding.inc from your registered email address. We will respond within 30 calendar days. You also have the right to lodge a complaint with the data protection authority where you live.
9. Marketing and Unsubscribing
We may send you marketing emails about offers and promotions. You can unsubscribe at any time by emailing support@aicoding.inc. Unsubscribing does not affect service-essential notices such as billing and security alerts.
10. International Transfers
Our servers and some of our providers are located outside your country or region, including in the United States. When we transfer your personal information abroad, we use appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) to ensure it is protected in line with this policy.
11. Children
The Service is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it promptly.
12. Third-Party Links
Our website may contain links to third-party websites or services. We do not control them, and their privacy practices are governed by their own privacy policies.
13. Changes to This Policy
We may update this policy. We will notify you of material changes by email or a notice on the website at least 15 days before they take effect, and update the "Last updated" date on this page.
14. Contact Us
Synovanta INC (operator of aicoding.inc). If you have questions about this policy or want to exercise your rights, email support@aicoding.inc. We reply within 2 business days and complete rights requests within 30 calendar days.