Privacy Policy

1. Information we collect

We collect limited information required to provide, support, and optimize our services:

• Account information — When you sign in with GitHub, we collect your email address and GitHub username to establish and maintain your user profile.
• Usage analytics — We use PostHog to collect anonymous usage and product analytics to understand interaction patterns and improve CXGRD.
• Service logs — Basic operational and transactional logs are collected for security verification, system debugging, and infrastructure reliability.
• Cookies — We use session and preference cookies necessary for authentication and service delivery. PostHog may set analytics cookies. You can disable cookies in your browser settings, though some features may not function correctly.

2. How we use your information

Information collected is used strictly for the following purposes:

• To provide, manage, and maintain the CXGRD platform
• To securely authenticate users via GitHub OAuth
• To improve product quality, user experience, and performance
• To monitor system telemetry and diagnose technical issues
• To manage subscriptions, provisioning, and payment verification

3. AI processing & data boundaries

CXGRD generates contextual developer prompts using the Groq API. When prompt generation is triggered, data handling is constrained to the following:

• Transmitted elements — Only the specific user request (e.g. "Refactor function wow()") and the associated local dependency graph generated by CXGRD are sent to the Groq API.
• Repository exclusion — CXGRD does not transmit entire codebase repositories to Groq, ensuring strict minimization of data exposure.

To opt out of AI processing, you may cancel your subscription or stop using the service. For more information, see Groq's privacy policy at groq.com/privacy-policy.

4. Third-party services

CXGRD relies on the following third-party providers. Each maintains their own privacy policy governing their data practices:

5. Subscription payments

All subscription payments are securely processed by Dodo Payments. CXGRD does not store, process, or have direct access to payment card numbers or sensitive billing credentials.

6. International data transfers

Our servers are located in Singapore and the United States. If you are located in the European Economic Area (EEA), UK, or Switzerland, your data may be transferred to countries that do not have equivalent data protection laws. Where required, we rely on Standard Contractual Clauses approved by the European Commission to safeguard such transfers.

If you believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection authority.

7. Account deletion & data retention

You may request permanent deletion of your account and personal data at any time by contacting hello@cxgrd.com. We will process deletion requests within a reasonable timeframe. We may retain certain information where required by law or for legitimate operational purposes such as fraud prevention.

8. Children's privacy

CXGRD is intended for users aged 18 and older. We do not knowingly collect or maintain data from individuals under 18. If you become aware of any such data, please contact us at hello@cxgrd.com.

9. Your rights

Depending on your location, you may have the right to:

• Access and obtain a copy of your personal data
• Correct inaccuracies in your personal data
• Request deletion of your personal data
• Withdraw consent to processing
• Object to or restrict certain processing
• Lodge a complaint with a supervisory authority (EEA/UK users)

To exercise any of these rights, contact us at hello@cxgrd.com.

10. Governing law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and applicable rules thereunder. For users in the EEA or UK, we comply with the General Data Protection Regulation (GDPR) and UK GDPR respectively.

11. Changes to this policy

We may update this Privacy Policy periodically. Continued use of CXGRD after revisions become effective constitutes acceptance of the updated policy. Material changes will be communicated via email or a notice on the platform.

12. Contact

For privacy-related inquiries, data requests, or policy clarifications, contact us at hello@cxgrd.com.