Privacy Policy

Introduction

Infrastack AI, Inc. ("Codewolf", "we", "us", or "our") is committed to protecting your privacy and securing your data. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use Codewolf's AI agent platform and related services ("Service").

We do not use your data to train AI models. Your data is never combined with other customers' data. We do not sell your personal information.

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

A. Information You Provide Directly

Account Information: When you create an account, we collect your name, email address, company name, and password.

Payment Information: We collect payment details (processed securely by Stripe) including billing address and payment method information.

Communication Information: When you contact our support team, we collect your name, email, and the content of your messages.

B. Information From Your Use of the Service

Slack Workspace Data: When you connect Codewolf to your Slack workspace, we access:

• Messages where @Codewolf is mentioned
• Channel information for channels where Codewolf is added
• Thread conversations Codewolf participates in
• Workspace user information (names, roles)

Integration Credentials: When you connect third-party tools (GitHub, Datadog, Sentry, AWS, etc.), we store encrypted access credentials with read-only permissions.

Usage Data: We collect information about how you use the Service, including:

• Agent workspace activity and operations performed
• Commands given to agents and their responses
• Feature usage patterns
• Error logs and diagnostic information

Log Data: We automatically collect IP addresses, browser type, device information, and access times when you use the Service.

C. Information We Do NOT Collect

Codewolf does not knowingly collect:

• Health information or medical records
• Biometric data
• Information from children under 13 years of age
• Payment card data (handled by Stripe, not stored by us)

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: To operate our AI agents, process your requests, investigate issues, and perform automation tasks on your behalf
• Billing and Account Management: To process payments, manage subscriptions, and calculate Agent Unit Credit (ACU) usage
• Improve the Service: To understand how the Service is used, identify bugs, and develop new features (using aggregated, de-identified data only)
• Security and Compliance: To detect fraud, prevent abuse, enforce our Terms of Service, and comply with legal obligations
• Communication: To send service updates, respond to support requests, and provide important notices about your account

We do NOT use your data, code, infrastructure configurations, logs, or any content accessed by our agents to train AI models, unless you explicitly agree in writing.

We may aggregate and de-identify data so it cannot be used to identify you or your organization. This de-identified data may be used for analytics and service improvement.

3. How We Share Your Information

We share your information only in the following limited circumstances:

Service Providers: We share data with third-party vendors who help us operate the Service, including:

• Cloud infrastructure providers (AWS, GCP)
• Payment processing (Stripe)
• Analytics services (anonymized usage data only)
• Customer support tools

All service providers are contractually required to protect your data and use it only for providing services to us.

Workspace Administrators: If you use Codewolf through a company Slack workspace, workspace administrators may be able to view agent activity and usage within their workspace.

Legal Requirements: We may disclose information if required by law, court order, or to:

• Comply with legal obligations or respond to lawful requests
• Protect the rights, property, or safety of Codewolf, our users, or the public
• Prevent fraud, security incidents, or other illegal activity
• Enforce our Terms of Service

Business Transfers: If Codewolf is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent: We may share information with third parties when you explicitly authorize us to do so.

We do NOT sell your personal information. We do NOT share your data with third parties for their marketing purposes.

4. Data Retention

We retain your information only as long as necessary to provide the Service and for legitimate business purposes:

• Account Data: Retained while your account is active and for 30 days after closure (unless you request immediate deletion)
• Agent Activity Logs: Retained for 90 days for audit and debugging purposes
• Billing Records: Retained for 7 years to comply with tax and accounting regulations
• Support Communications: Retained for up to 1 year

After the retention period expires, we securely delete or anonymize your data. You can request earlier deletion by contacting us at hello@codewolf.ai.

5. Security

Codewolf is SOC 2 Type II certified. We implement industry-standard security measures to protect your information:

• Encryption: AES-256 encryption for data at rest and TLS 1.2+ for data in transit
• Isolated Agent Workspaces: Each customer's agents run in dedicated, isolated sandboxes that never share resources
• Access Controls: Role-based access control (RBAC) and read-only permissions by default for integrations
• Audit Logging: Comprehensive logs of all agent actions and system access
• Security Monitoring: 24/7 monitoring for suspicious activity and security incidents
• Regular Audits: Third-party security audits and penetration testing

While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for safeguarding your account credentials.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Data Portability: Request your data in a machine-readable format
• Objection: Object to processing of your personal information in certain circumstances
• Withdraw Consent: Withdraw consent for processing based on consent (doesn't affect prior processing)

To exercise these rights, contact us at hello@codewolf.ai. We will respond within 30 days. We may request verification of your identity before processing requests.

If you're unhappy with our response, you have the right to lodge a complaint with your local data protection authority.

7. International Data Transfers

Codewolf processes data on servers located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States.

We apply the same privacy protections described in this Policy regardless of where your data is processed. For users in the European Economic Area (EEA) or United Kingdom (UK), we ensure adequate safeguards are in place for international data transfers.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the "sale" of personal information (note: we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at hello@codewolf.ai with "California Privacy Rights" in the subject line.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email to your registered account address
• Provide notice through the Service

Your continued use of the Service after notification constitutes acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us by sending correspondence to Infrastack AI, Inc., 640 California St, San Francisco, CA 94108, or by emailing us at hello@codewolf.ai.