Privacy Policy
Last updated: May 2026 · GetCode, United Kingdom · ICO registered
1. Who we are
GetCode is a trading name operated in the United Kingdom, registered with the Information Commissioner's Office (ICO). Contact: privacy@getcode.one
2. What data we collect
Account data: email address, username, and display name when you register. Usage data: generations you create, output types used, and timestamps. Payment data: processed exclusively by Stripe — we do not store card details. Technical data: IP address (for rate limiting and security), browser type, and device information. Uploaded files: temporarily processed to generate code and not stored after generation completes.
3. How we use your data
To provide the GetCode service and process your code generation requests. To manage your account, subscription, and billing. To send transactional emails such as account confirmation, password reset, and receipts. To prevent abuse, fraud, and enforce our Terms of Service. We do not use your prompts or generated code to train AI models.
4. Legal basis (UK/EU GDPR)
Contract performance: to deliver the service you signed up for. Legitimate interests: security, fraud prevention, and service improvement. Legal obligation: retaining billing records for 7 years as required by HMRC.
5. Data sharing and subprocessors
We share your data only with service providers necessary to operate GetCode: Supabase (database hosting), Stripe (payments), Anthropic/Google/OpenAI (AI generation — only your prompt is sent, no personal data), Resend (transactional email), and Vercel (hosting). A full subprocessors list is at getcode.one/subprocessors.
6. Your rights
Under UK GDPR you have the right to access, correct, port, restrict, or erase your personal data. To exercise any right, email privacy@getcode.one. We respond within 30 days. You may also lodge a complaint with the ICO at ico.org.uk.
7. Data retention
Account data is retained while your account is active and deleted 30 days after account deletion. Generation history is deleted immediately upon account deletion. Billing records are retained for 7 years as required by UK law. Server logs are retained for 30 days.
8. International transfers
Your data may be processed in the United States by our service providers. We rely on Standard Contractual Clauses and the UK International Data Transfer Agreement for these transfers.
9. Cookies
We use only essential cookies required for session management and security. We do not use advertising or tracking cookies. See our Cookie Policy for full details.
10. Contact
For privacy questions: privacy@getcode.one. For data deletion requests: privacy@getcode.one with subject line "Delete my data". We aim to respond within 5 business days.