CodeCompass
Privacy
Last updated April 2026. This describes how this web app treats information you provide while using it.
What we collect
If you register, we store the account details you submit (such as name and email) and a password hash so you can sign in. When you analyze a repository, we store metadata, file and code structure information, and analysis results needed to show search, chat context, embeddings-based retrieval, and related screens in your workspace. If you use AI chat or analysis features, prompts and context may be sent to the model providers configured for that deployment.
Cookies and sessions
We use cookies (or similar browser storage) to keep you signed in and to protect forms where applicable. These are functional cookies required for authentication, not third-party advertising cookies from this app. A detailed list is on the Cookies page.
Your choices
Where the deployment exposes them, you can download a machine-readable export of data linked to your account and permanently delete your account (including indexed data and server-side webhook settings for that user) from Settings. Deletion does not erase logs your host may keep for security or operations.
Subprocessors and transfers
Depending on configuration, a deployment may use providers such as a database host, email delivery (for example Resend), AI inference (for example Anthropic or OpenAI-compatible APIs), Redis or Upstash for rate limiting, and optional vector or embedding services. The legal basis, transfer mechanisms (for example SCCs), and full list depend on your operator—ask them for a current subprocessor register if you need it for compliance.
Retention
Data persists while your account exists and as needed to provide the service. Sessions typically expire after about seven days of inactivity unless your operator changes this. Removing an indexed repository removes associated analysis data for that repo in normal operation. Backups and disaster-recovery copies are controlled by your deployment operator.
Contact
For privacy questions about a specific deployment, contact the operator of that instance. This page describes the product's intended behavior; your host may add policies, subprocessors, or regional terms.