Introduction

Langbase, Inc. d/b/a Command Code ("Company", "we", "us", or "our") operates the website https://commandcode.ai and the related command-line and editor tools (collectively, the "Service"). This privacy policy outlines how the Company collects, uses, protects, and discloses information gathered from your use of the Service.

We use your data to provide, secure, and improve the Service. By accessing and using the Service, you consent to the collection and use of your information as described in this privacy policy.

What we don't do: The Company does not train AI models on your source code, and we do not sell your personal data to third parties.

Information Collection and Utilization

We collect different types of information for different purposes, in order to provide and improve the Service.

Types of Data Collected

Personal Data: While using the Service, we may ask you to provide, or we may collect, personally identifiable information that can be used to contact or identify you ("Personal Data"). This may include, but is not limited to: email address, first and last name, account identifiers, billing details (processed by our payment processor), and cookies and usage data.

Usage Data: We may also collect information on how the Service is accessed and used ("Usage Data"). This may include your computer's IP address, browser type and version, operating system, the pages or features of the Service you use, the time and date of your visit, time spent on those pages, unique device identifiers, referral sources, crash reports, and other diagnostic data.

Prompts and AI Inputs: When you use AI-powered features, the prompts, attached files, code snippets, and other inputs you submit are transmitted to third-party AI model providers (such as Anthropic, OpenAI, and Google) so that they can generate a response. These providers process this content under their own terms and privacy policies. We do not use your prompts or your source code to train our own AI models, and we instruct providers, where available, not to use your content to train their models.

Taste Profiles and Local Project Data: When you use taste-learning features, structured preference rules are stored locally in your project's .commandcode/ directory and, if you opt in, synced to your account on commandcode.ai. Source code itself is not uploaded as part of taste sync.

Use of Data

The Company uses the collected data for various purposes, including to:

• Provide, maintain, and operate the Service
• Authenticate users, secure accounts, and prevent fraud or abuse
• Process payments and manage subscriptions and credits
• Notify you about changes to the Service
• Allow you to participate in interactive features when you choose to do so
• Provide customer support
• Gather analysis or other information so that we can improve the Service
• Monitor the usage of the Service
• Detect, prevent, and address technical issues and security incidents
• Comply with legal obligations and enforce our terms

Retention of Data

The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this privacy policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. Usage Data is generally retained for a shorter period, except where it is needed for security, fraud prevention, or to improve the Service.

Transfer of Data

Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. Where required by applicable law, we use appropriate safeguards for cross-border transfers.

Your consent to this privacy policy followed by your submission of such information represents your agreement to that transfer.

Disclosure of Data

The Company may disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

In the event of a merger, acquisition, financing, reorganization, or sale of assets, Personal Data may be transferred as part of that transaction, subject to standard confidentiality protections.

Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data (including encryption in transit, access controls, and audit logging), we cannot guarantee its absolute security.

Service Providers

We engage third-party companies and individuals to facilitate the Service, provide the Service on our behalf, perform service-related tasks, or assist us in analyzing how the Service is used (collectively, "Service Providers"). These third parties have access to your Personal Data only to perform these tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose.

Our key categories of Service Providers include:

• AI Model Providers: We use third-party AI model APIs to power generative AI features, including providers such as Anthropic, OpenAI, and Google. When you interact with these models, prompts and associated content are transmitted to the selected provider and are also subject to that provider's privacy policy.
• Payment Processing: We use Stripe, Inc. to process payments and manage billing. Payment card details are submitted directly to Stripe and are governed by Stripe's privacy policy. The Company does not store full payment card numbers on its systems.
• Hosting and Infrastructure: We use cloud infrastructure and edge providers (such as Cloudflare and other hosting providers) to host, deliver, and secure the Service.
• Analytics and Product Telemetry: We use analytics services to understand how the Service is used and to improve it.
• Advertising and Marketing: We use marketing platforms and similar technologies to measure and improve our marketing activities. These are loaded only with your consent.
• Email and Communications: We use third-party email service providers to send transactional emails (such as account, billing, and security notifications) and, with your consent, marketing emails.
• Customer Support: We may use customer support and ticketing tools to respond to your inquiries.

Subprocessors

To deliver the Service, the Company engages a small set of trusted vendors who may process Personal Data on our behalf under written data processing terms. We keep this list current as our infrastructure evolves; the categories below reflect our production stack.

Third-Party AI Providers

When you use AI-powered features, your prompts, attached files, code snippets, and related inputs are transmitted to the AI provider you have selected (or that the Service routes to on your behalf) so it can generate a response. Each provider processes your content under its own terms and privacy policy. We do not use your prompts or source code to train our own models, and where providers offer a no-training option we enable it by default.

• Anthropic — Claude models accessed directly via the Anthropic API.
• OpenAI — GPT models accessed directly via the OpenAI API.
• GitHub — used when you authenticate through GitHub.
• Vercel — routes requests to open-model and commercial model providers.
• Cloudflare — routes and observes requests to open-model and commercial model providers.
• OpenRouter — routes requests to open-model and commercial model providers.

Downstream model providers: When you use an open-source or third-party model through one of the gateways above (for example, models from Google, Meta, DeepSeek, Alibaba/Qwen, Moonshot/Kimi, DeepSeek, Mistral, or other model creators), your request is forwarded by the gateway to the underlying inference provider that hosts that model. The gateway and the underlying provider each process your content under their own terms and privacy policies. The set of available downstream providers changes over time as new models and routes are added.

Infrastructure and Operations

• Cloudflare
• Supabase
• Stripe
• PostHog
• Tinybird
• Axiom
• GitHub

This list reflects the Company's primary subprocessors as of the date above. We may add or replace subprocessors as the Service evolves; material changes will be reflected here. If you would like to be notified of changes in advance, contact us at support@commandcode.ai.

Analytics

We use analytics services to understand how the Service is used and to improve it. Where required by applicable law, we rely on your consent before deploying these technologies.

Cookies and Similar Technologies

We collect information from your browser by using cookies and similar technologies, depending on your settings or preferences in connection with the Service and our marketing activities. Where required by applicable law, we obtain your consent for the use of cookies. You may choose to delete or not accept our cookies through your browser's cookie controls.

Your Rights

Depending on your location, you may have certain rights under applicable data protection laws. These rights may include:

• The right to access the Personal Data we hold about you
• The right to correct inaccurate Personal Data
• The right to request deletion of your Personal Data
• The right to restrict or object to certain processing
• The right to data portability
• The right to withdraw consent at any time, where processing is based on consent
• The right not to be discriminated against for exercising your privacy rights
• The right to lodge a complaint with your local supervisory authority

To exercise any of these rights, please contact us at support@commandcode.ai. We may need to verify your identity before completing your request.

Links to Other Sites

The Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

The Service does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us and we will take steps to remove that information from our systems.

Changes to This Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date at the top of this privacy policy.

You are advised to review this privacy policy periodically for any changes. Changes to this privacy policy are effective when they are posted on this page.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at support@commandcode.ai.