legal privacy
Last updated
Privacy Policy
This document is provided in English; the page around it follows your language.
This policy explains what we collect when you visit this website or use a hosted plan, why we collect it, how long we keep it, and what you can ask us to do with it. The rovecode command-line tool itself runs on your machine and sends nothing to us: its traffic goes to the model providers and MCP servers you configure, and telemetry is off until you turn it on.
What we collect
The website. Our servers keep standard access logs — the address requested, the time, your browser's user-agent string and your IP address — for thirty days, to keep the site running and to notice abuse. We do not use analytics scripts, advertising cookies or fingerprinting. The one thing the site stores in your browser is your language choice.
Your account. When you sign up we store your name, your email address, a hash of your password (or the identifier the sign-in provider gives us), and the time the account was created. If you sign in with GitHub we receive your public profile and primary email from GitHub and nothing else.
Plans and billing. Payments are handled by a payment processor; we receive the plan, the amount, the last four digits of the card and the billing country, never the full card number. Usage — the number of sessions and credits consumed — is recorded to meter the plan you are on.
Support and contact. If you write to us or submit the demo form we keep the message and your reply address for as long as the conversation is open, then for one year.
What we do not do
We do not sell personal data. We do not use your code, prompts or the output produced for you to train models. We do not share personal data with third parties except the processors listed below, and then only to provide the Service.
Processors
Hosting is provided by the infrastructure provider named in the security page; email delivery and payments by processors bound by contracts that limit them to acting on our instructions. A current list is available on request.
Retention
Account data is kept while the account exists and for thirty days after it is closed, then deleted. Billing records are kept for the period tax law requires. Access logs are kept for thirty days.
Your choices
You can change your name and password on the account page and delete the account there as well. You can ask us for a copy of the personal data we hold about you, ask us to correct it, or object to a use of it, by writing to privacy@rovecode.dev. If you are in the European Economic Area or the United Kingdom you also have the right to complain to your data protection authority.
Changes
If this policy changes in a way that matters, we say so by email and on this page before the change takes effect.