Privacy Policy

Effective date: August 3, 2026

In plain language

We collect the profile info GitHub or Google give us when you sign in, plus the project descriptions (PRDs) and generated code you create through Turbocoder. Your PRD and generated code are sent to our AI providers (an AI gateway and Codemind) to actually generate your project — that's the core of how the product works. We don't use cookies or tracking — we keep you signed in with a token stored in your browser, not a cookie. We don't sell your data. Everything is stored on Cloudflare's infrastructure. You can request deletion of your account and data at any time. This summary isn't the full policy — the sections below are.

1. Who We Are

This Privacy Policy explains how Turbocoder Inc. ("Turbocoder," "we," "us," or "our") collects, uses, and protects information when you use turbocoder.app and its associated application and API (collectively, the "Service").

2. Information We Collect

Account information

When you sign in via GitHub or Google OAuth, we receive and store your name, email address, username (GitHub) or profile identifier (Google), and avatar/profile image URL. We do not receive your GitHub or Google password. We do not currently store the OAuth access token issued by GitHub or Google beyond the sign-in exchange.

Content you provide

We store the product requirements descriptions ("PRDs") you submit, the code generated in response to them, and metadata about each generation run (status, timestamps, and — once deployment is live — the resulting deployment URL).

Usage data

We track the number of AI-generation requests you make per day in order to enforce usage limits. We do not currently use third-party analytics, advertising, or tracking technologies on the Service.

3. How We Use Your Information

  • To authenticate you and maintain your account session;
  • To generate code from your PRD by sending relevant content to our AI providers (see Section 4);
  • To enforce per-account usage limits and prevent abuse;
  • To operate, maintain, secure, and improve the Service;
  • To communicate with you about your account or the Service (for example, generation status).

4. Third Parties We Share Data With

We share data with the following categories of third parties, only as needed to operate the Service:

  • AI providers. Your PRD content, and relevant generated-code context, is sent to the AI models we use to generate your project — accessed through our AI gateway and through Codemind, our code-generation partner — solely to produce the generated output you requested.
  • GitHub / Google. Used for authentication (OAuth sign-in). We receive only the profile information described in Section 2.
  • Cloudflare. Our infrastructure provider. All account data, PRD content, generated code, and operational data is stored on Cloudflare's platform (database, key-value, and object storage services).

We do not sell your personal information. We do not share your PRD content or generated code with any party other than the providers listed above, except as required by law or to protect the rights, safety, or property of Turbocoder or others.

5. Data Retention

We retain account information for as long as your account is active. Generated projects and their PRD content are retained until you delete them or your account, or until you request deletion under Section 7. We may retain limited data as required for legal, security, or fraud-prevention purposes even after account deletion.

6. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS) for all data in transit and access controls on our infrastructure. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete the personal information we hold about you. You can request any of these by contacting us at the address below. We will respond to verified requests within a reasonable time and in accordance with applicable law (including GDPR and CCPA where applicable).

8. Cookies and Local Storage

We do not use cookies. To keep you signed in, the Service stores an authentication token in your browser's local storage; it is removed when you sign out. We do not use analytics, advertising, or cross-site tracking technologies of any kind. If this changes, we will update this policy and, where required, request your consent.

9. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International Users

Turbocoder is operated from the United States and data is stored on infrastructure that may be located in multiple regions globally via our hosting provider. By using the Service, you consent to the processing of your information in the United States and other locations where our providers operate.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above and, where practicable, communicated through the Service.

12. Contact

For privacy questions or to exercise your rights, contact us at support@turbocoder.app.