AI Toolkit Privacy Policy

This Privacy Policy describes what information AI Toolkit stores when you use it, what it uses that information for, who receives it and how you can delete it.

1. Information we store

Account data: your name, your email address, your password, which is stored hashed, and your language and country.
The code you analyse: every file you send, from the web validator or through validate_code, is saved in the private storage of AI Toolkit and in its database, together with the run: the name or path of the file, the project you indicate, the findings, the date and the token used.
Your projects: the content, path, branch and status of the documents you save, and the files you upload to your projects, which are kept in the file storage used by AI Toolkit.
Your tokens: the name of each MCP or API token, what it allows and when it was last used. The token itself is shown to you once and only its fingerprint is stored, so it cannot be read back out.
Technical data: IP address, browser, device and session data, and the cookies needed to keep you signed in and remember your preferences.

2. How we use it

To analyse your code and show you the history of your runs.
To keep your project documents and files available to you and to the clients you connect.
To authenticate the requests made with your tokens.
To provide support, keep the service secure and operate it.

3. AI providers

Code Analysis runs on automated rules executed by AI Toolkit itself. AI Toolkit does not send the code you analyse, or the documents and files of your projects, to AI providers.

AI Toolkit uses a third-party AI provider only to translate its own content, such as the coding standards, the instructions for AI assistants and the text of its interface.

The AI assistant you connect to AI Toolkit, such as Claude Code, Codex or Cursor, is chosen by you. What it reads from AI Toolkit and sends to its own provider is governed by that provider's terms.

4. Data sharing

We do not sell your data. It is only shared:

With the service providers needed to operate AI Toolkit, such as hosting, file storage and email delivery.
To comply with a legal obligation, court order or regulatory requirement.
To protect the rights, security or integrity of AI Toolkit or its users.

5. Retention and deletion

The code you analyse, the history of your runs and the documents and files of your projects are kept while your account is active, unless you delete them.
You can delete documents, folders and files from the Projects page of the application at any time.
To ask for the deletion of the code you analysed and of your run history, open a support ticket from your account.
To delete your account, go to My Profile and select Delete Account. Your account is closed at once and you lose access to it. If you also want the code, documents and files associated with it removed, open a support ticket before deleting it.
Some minimal data may be retained where it is necessary for legal, accounting or security purposes.

6. Token security

Each MCP or API token gives access to your account on your behalf. You can see your tokens and revoke any of them from the MCP page of the application (/app/mcp). A revoked token stops working at once.

We apply reasonable technical and organisational measures to protect your information. However, no system on the internet is completely secure.

7. Your rights

You have the right to:

Access your information: your run history and your projects are available in your account.
Correct your account data from My Profile.
Request the deletion of your information, as described above.
Restrict or object to the processing of your data in certain cases.

To exercise these rights, open a support ticket from your account.

8. Changes to this policy

This Privacy Policy may change. The date at the top of this page shows when it last changed.

9. Contact

For questions or requests about this Privacy Policy, open a support ticket from your account in AI Toolkit.