Privacy Policy

Last updated: January 15, 2026

We Do Not Collect Your Repository Code

Cadracode analyzes your codebase through the GitHub API in real-time during analysis sessions. We do not store, copy, or retain your repository code, file contents, or source code. All analysis is performed on-demand and results are cached as metadata only (feature names, relationships, risk scores).

What We Collect

Account Information

  • • Email address (for authentication)
  • • GitHub App installation ID (to access your repositories)
  • • Account creation date and last login

Analysis Metadata (Not Your Code)

  • • Repository names and structure (file paths, directory tree)
  • • Feature names and relationships (e.g., "Payment Gateway" connects to "Order Manager")
  • • Risk scores and architectural insights (High/Med/Low risk classifications)
  • • Analysis timestamps and usage statistics

We do NOT store file contents, source code, API keys, secrets, or any actual code from your repositories.

Payment Information

  • • Payment status and transaction IDs (processed by Dodo Payments)
  • • Usage limits and scan counts
  • • We do NOT store credit card numbers or payment details (handled by Dodo Payments)

How We Use Your Data

  • • To provide analysis services and generate visual architecture maps
  • • To track your usage limits and payment status
  • • To improve our AI analysis algorithms (using anonymized metadata)
  • • To send important account notifications (via email)
  • • We do NOT sell, rent, or share your data with third parties
  • • We do NOT use your repository data for training AI models or commercial purposes

Data Security

  • • All data is encrypted in transit (HTTPS) and at rest (database encryption)
  • • We use Supabase for secure authentication and data storage (SOC 2 compliant)
  • • GitHub App access is scoped to only repositories you explicitly grant access to
  • • Analysis sessions are temporary—code is fetched, analyzed, and discarded
  • • Row-level security ensures users can only access their own data

Your Rights

  • • Delete Account: You can delete your account and all associated data from Settings
  • • Clear Cache: Delete cached analysis results for any repository
  • • Revoke Access: Uninstall the GitHub App at any time to revoke repository access
  • • Export Data: Request a copy of your account data (metadata only, not code)

GitHub Integration

Cadracode uses the GitHub App to access your repositories. Here's what that means:

  • • You control which repositories the app can access (selective installation)
  • • We use read-only access to fetch file trees and contents during analysis
  • • Access tokens are temporary and scoped to your installation
  • • You can revoke access at any time by uninstalling the GitHub App
  • • We do NOT have write access, cannot modify your code, and cannot access private repositories you don't explicitly grant access to

Third-Party Services

Supabase: Authentication and database hosting (privacy policy: supabase.com/privacy)
Dodo Payments: Payment processing (privacy policy: dodopayments.com/privacy)
Anthropic Claude: AI analysis (privacy policy: anthropic.com/privacy)

Questions or Concerns?

If you have questions about this privacy policy or how we handle your data, please contact us at privacy@cadracode.com

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. You are advised to review this policy periodically.