Privacy Policy

1.The short version

• We collect what we need to run your account and do the work you ask for. Nothing more.
• We read your code only to do that work.
• We don't sell your data, and we don't run advertising trackers.
• You can ask us to delete your data at any time.

2.Who we are

Woden, Inc. ("Wōden," "we," "us") runs woden.ai and Code Legion. This policy explains what we collect, why, and what you can do about it.

3.What we collect

• Account details. Your username, email address and password, stored as a secure hash we can't read.
• Connected accounts. When you connect GitHub, GitLab or Gitea, we receive the access you grant and the account name it belongs to.
• Your code and tickets. The repositories and issues you connect, which we read to plan and do your tasks.
• Work records. The tasks you start, their status, cost, and the pull requests they produce, including whether you merged them.
• Payments. Your purchases are handled by our payment provider. We see the amount, the date and the last four digits of your card, never the full number.
• Technical data. IP address, browser type and sign-in times, used to keep your account secure and the Service running.

4.How we use it

• To run your account and do the work you ask for.
• To bill you correctly, including checking whether work was merged.
• To keep the Service secure and prevent misuse.
• To contact you about your account, and about changes that affect you.
• Training. [Decide, matching the Terms. Recommended: "We don't use your code to train our models."]

5.Who we share it with

Only the companies that help us run the Service, under contracts that limit what they can do with it:

• Hosting and infrastructure: [provider]
• Payments: [payment provider]
• AI model providers, where a task uses one: [providers, or remove once Wōden runs its own models]
• Email delivery: [provider]

We'll also share information if the law requires it, or as part of a merger or sale of the company, in which case this policy continues to apply.

6.Cookies

We use only the cookies needed to keep you signed in and protect your account. No advertising or cross-site tracking cookies.

7.How long we keep it

• Account and billing records: as long as your account is open, then as long as tax and accounting law requires.
• Copies of your code: only while a task needs them. Each task's machine is torn down when the task is done. [Confirm retention for any stored copies.]
• Work records: [period], then deleted.

8.Security

Each task runs on an isolated machine. Data is encrypted in transit and at rest. [Confirm with engineering.] Access inside Wōden is limited to the people who need it to run the Service.

9.Your choices and rights

You can see, correct, export or delete your data, and disconnect any code host at any time. Residents of California, the EU and the UK have additional rights under their local laws, and we honor them for everyone. To make a request, write to [privacy email].

10.Children

The Service is not for anyone under 18, and we don't knowingly collect their data.

11.Changes

If we change this policy in a way that matters, we'll tell you by email or in the product before it takes effect.

12.Contact

Questions about privacy: [privacy email]