Privacy policy for CppPilot Cloud
Last updated: 2026-10-24
The controller of the personal data of CppPilot Cloud is CppPilot, Grenoble, Francce. Contact: contact@cpppilot.com. This policy covers CppPilot Cloud. When CppPilot uses your own Codex or Claude account instead, it sends nothing to us, as described in the extension's privacy notice.
What we process
- Account: your email address, your plan, and your subscription status.
- Signed-in installations: the computer name sent at sign-in, the sign-in date, and the date of last use. Access tokens are stored only as irreversible fingerprints.
- Usage: for each month, the number of AI requests, the tokens they used, and their cost, to apply your allowance.
- AI requests: the code, build diagnostics, and context an action needs are relayed to OpenAI to produce the answer. CppPilot Cloud does not store or log their content.
- Account page: a session cookie, valid one hour, to keep you signed in to the page. No advertising or tracking cookies.
Why
To provide the service you asked for (performance of the contract): signing you in, answering CppPilot's requests, applying your plan and allowance, and managing your subscription. To protect the service against abuse (legitimate interest).
Who receives it
- OpenAI, which produces the AI answers under its API terms; according to its API data policy, API data is not used to train its models by default.
- Paddle, our reseller, which processes payments, invoices, and taxes as Merchant of Record under its own privacy policy. We never see your card details.
- Render, which hosts the service in the European Union (Frankfurt), and our email provider, which sends the sign-in links.
Some of these providers may process data outside the European Union, under the safeguards required by the GDPR, such as standard contractual clauses.
How long
Account data and usage are kept while the account exists. Deleting your account removes your email address, installations, and usage from our service at once; daily backups that contain them are deleted within 14 days. Paddle keeps invoices as required by tax law.
Your rights
You can see, correct (change your email address), and delete your data from your account. You also have the rights of access, rectification, erasure, restriction, objection, and portability under the GDPR: write to contact@cpppilot.com. You may lodge a complaint with your data protection authority (in France, the CNIL).