GenerativeIDE Privacy Policy

1. Information We Collect

We collect personal data in the following ways:

A. Information You Provide Directly

• Account Information: When you sign up, we collect your name, email address, and other identifiers.
• Payment Information: If you purchase a paid plan, your payment details are processed by Stripe. We do not store full payment card data.
• Inputs and Outputs: When you use GenerativeIDE, you may provide prompts, code, or data ("Inputs"), which generate AI based responses ("Outputs"). If you include personal data in your Inputs, that data may appear in Outputs.
• Feedback: We collect feedback, bug reports, or suggestions you provide.
• Communications: If you contact us (e.g., via email or chat), we may collect your name, contact info, and message content.

B. Information We Collect Automatically

When you visit our website, the following third-party services collect data on our behalf:

• PostHog (Product Analytics, Feature Flags, A/B Testing): We use PostHog to understand how people use the website and app, to run feature flags, and to run A/B tests. PostHog collects page views, button clicks, feature usage events, device and browser information, and IP address. If you create an account or provide your email address, we link your analytics data to that email so we can understand how individual users engage with the product. PostHog data is processed by PostHog, Inc. (United States). PostHog Privacy Policy
• Google Analytics 4 (ID: G-FTBFT168ZN): We use Google Analytics to understand website traffic — what pages people visit, where they come from, and what devices they use. GA4 collects page views, approximate location derived from IP address, device information, and referral source. The full IP address is not stored by Google. Google Privacy Policy
• Loops.so (Email Delivery): We use Loops to send product update emails and onboarding sequences. When you provide your email address (at signup or via a form on our website), it is sent to Loops for email delivery. Loops stores your email address and associated properties (such as your signup date, plan type, and A/B test variant) in order to send relevant emails. Loops Privacy Policy
• Cloudflare (CDN and Security): Our website is served through Cloudflare's content delivery network. Cloudflare processes your IP address and HTTP request data for security, performance, and bot protection. Cloudflare may set cookies on your browser for these purposes (see Section 1C). Cloudflare Privacy Policy
• Microsoft Azure CDN (Download Delivery): Our downloadable app files are served via Microsoft Azure's content delivery network (CDN endpoint: gide-egh7ejcxefagdkhc.z01.azurefd.net). When you download the app, Azure processes your IP address and request metadata to deliver the file. Microsoft Privacy Statement
• Location Data: We may infer approximate location from your IP address for security or performance purposes.

C. Cookies and Local Storage

We use browser storage (cookies, localStorage, and sessionStorage) to remember your preferences, run analytics, and manage your session. See our Cookie Policy for the full table. The key items are:

Set by us (first-party):

• gide_gdpr_consent (localStorage) — stores your cookie consent choice so we do not ask again.
• gide_opt_out (localStorage) — stores your analytics opt-out preference. When set, all PostHog and GA tracking stops immediately.
• gide_pending_ph_events (localStorage) — temporarily queues analytics events before you have given consent. Events are discarded if you decline.
• ab_variant (sessionStorage) — stores which A/B test variant you are assigned to, so the page stays consistent during your visit. Cleared when you close the tab.
• mobile_form_success (sessionStorage) — records whether you already submitted the email form this session, to avoid showing it again. Cleared when you close the tab.
• utm_source, utm_medium, utm_campaign (sessionStorage) — stores marketing attribution parameters from the URL (e.g., if you arrived via an ad or email link). Used only to understand how you found us. Cleared when you close the tab.

Set by third-party services:

• _ga, _ga_G-FTBFT168ZN (cookies, up to 2 years) — set by Google Analytics for analytics client and session identification.
• PostHog cookies (various names) (cookies) — set by the PostHog analytics library for session tracking and user identity.
• __cf_bm, cf_clearance (cookies) — set by Cloudflare for bot protection and security verification.

You can manage your cookie preferences at any time using the Cookie Settings link in the footer, or by emailing [email protected].

D. Information We Do Not Collect

We do not intentionally collect sensitive personal data (e.g., health, biometric, or religious information) or data from individuals under 18. If you believe a minor has provided personal data, please contact us to remove it.

2. How We Use Personal Data

• Provide, operate, and maintain the Service.
• Create and manage accounts.
• Process payments and prevent fraud.
• Improve, debug, and develop the Service and the website.
• Communicate with you about updates or new features.
• Enforce our Terms of Service.
• Comply with legal obligations and protect our rights and users.

3. How We Share Personal Data

We may share personal data only as necessary:

• Service Providers: We use trusted vendors (e.g., hosting, analytics, payment processors) who process data on our behalf under strict confidentiality and security requirements. See Section 4 for the full list.
• Legal Requirements: We may disclose information if required by law or to protect rights, property, or safety.
• Business Transfers: In case of a merger, acquisition, or reorganization, data may be transferred as part of that transaction.
• Affiliates: Our affiliates may access data only as permitted under this policy.
• With Consent: We may share information with your consent or at your direction.

We do not sell or rent personal data. We also do not share it for cross-context behavioral or targeted advertising.

4. Third-Party Sub-Processors

The following third-party companies process personal data on our behalf. We rely on their published data processing terms and standard contractual clauses where applicable.

5. Data Retention

We retain personal data only as long as needed to provide the Service, meet legal obligations, and resolve disputes. When no longer required, data is deleted or anonymized.

6. Security

We use administrative, technical, and organizational measures to protect personal data. Our professional vendors, such as Stripe, Inc. are strictly responsible for their own security measures and obligations to protect personal user data, therefore we rely on their security and make no guarantees or warranties for those vendors.

However, no system is completely secure. Use caution when sharing data and avoid submitting sensitive personal information.

7. Your Rights (Including GDPR)

Depending on your jurisdiction, you may have the following rights:

• Access and receive a copy of your personal data.
• Correct inaccurate information.
• Request deletion of your data ("right to be forgotten"). Email [email protected] to request deletion — we will respond within 30 days.
• Withdraw consent at any time — use the Cookie Settings link in the footer or email us. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Restrict or object to processing.
• Data portability (where technically feasible).
• Lodge a complaint with your local data protection supervisory authority.

For users in the EU/EEA (GDPR)

If you are located in the EU or EEA, the following additionally applies:

• Legal basis for processing: We rely on legitimate interest for product analytics and security monitoring; consent for cookies and email marketing; and contract performance for account features and payment processing.
• International data transfers: Your data may be transferred to the United States and other countries. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for these transfers, and require our sub-processors to do the same.
• Data deletion: To request deletion of your personal data, email [email protected]. We will acknowledge your request within 72 hours and complete it within 30 days.

To exercise any of these rights, contact us at [email protected]. We may verify your identity before fulfilling your request.

8. International Transfers

We process data primarily in the United States. If you are located outside the U.S., your data may be transferred and processed in jurisdictions with different data protection laws. We use standard contractual clauses or equivalent safeguards for international transfers.

9. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will revise the "Last updated" date.

You are responsible for reviewing this Policy from time to time, carefully observing the "last updated" date as we will not notify you. Continued use of the Service after changes means you accept the new policy.

10. Contact Information

GIDE, Inc.

7350 McArdle Rd, Apt 168, Corpus Christi, TX 78412.

Email: [email protected]

Support: [email protected]

Legal: [email protected]