Privacy Policy

Last updated: March 22, 2026

Palette Box ("we", "us", "our"), operating under the brand CodeSafer, operates the codesafer.org website and the cleaner-code MCP server software. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Information: When you subscribe to a paid plan, our payment processor Paddle collects your name, email address, and payment details. Paddle acts as the Merchant of Record for all transactions.

Usage Data: For paid API users, we track the number of API calls made per billing period to enforce plan limits. We do not store the content of analyzed code on our servers beyond the duration of the analysis request.

Local Analysis: Static analysis runs entirely on your local machine. No code is transmitted to our servers during static analysis.

AI Analysis (API): When using the cloud-based AI analysis API, code snippets are sent to our server for analysis. These snippets are processed in memory and are not permanently stored.

2. How We Use Your Information

• To provide and maintain our service
• To manage your subscription and API access
• To enforce usage limits based on your plan
• To communicate service updates and respond to support requests
• To improve our detection models and service quality

3. Payment Processing

All payments are processed by Paddle, which acts as our Merchant of Record. We do not directly collect or store your credit card information. Please refer to Paddle's privacy policy for details on how they handle your payment data.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following cases:

• With Paddle for payment processing
• When required by law or legal process
• To protect our rights, privacy, safety, or property

5. Data Security

We implement industry-standard security measures including encrypted connections (TLS/SSL), secure API key authentication, and access controls. However, no method of transmission over the Internet is 100% secure.

6. Data Retention

We retain account data for as long as your account is active. API usage logs are retained for 90 days. Code submitted for AI analysis is not stored beyond the processing duration. You may request deletion of your data at any time by contacting us.

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, please contact us at [email protected].

8. Cookies

Our website uses minimal cookies for essential functionality only. We do not use tracking cookies or third-party analytics that collect personal information.

9. Children's Privacy

Our service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: [email protected]
• Website: https://codesafer.org