Legal
Privacy Policy
Last updated: 5 November 2026
1. The short version
Your project data stays on your desktop. The account service stores identity, passkey and device information needed to sign in and link devices.
2. What we collect
| Data | Why | Retention |
|---|---|---|
| Email, display name, language, time zone | Account and communication | Until account deletion |
| Passkey public keys and credential metadata | Sign-in | Until passkey/account deletion |
| Session and refresh token hashes | Stay signed in; revoke sessions | Session lifetime |
| Device labels, type, status and timestamps | Device list and revocation | Until account deletion |
| IP address in sessions/audit | Security and abuse prevention | 72 hours, then nulled |
| Audit events | Account security | Up to 400 days |
3. What we do not collect
We do not receive your meeting transcripts, notes, source code, chats, generated documents, provider keys or AI prompts. Those stay on your computer and go to the model provider you choose.
4. Cookies
The account pages use one necessary session cookie. See the Cookie Policy. We do not use advertising or analytics scripts.
5. Sharing
We use infrastructure and email providers to run the service. We do not sell personal data. We may disclose data where required by law or to protect the service and its users.
6. Your choices
You can export or delete your account from the account pages. Deleting the account removes identity, passkey, session and device rows; backups age out on the backup schedule.
7. Contact
Privacy questions: privacy@llm-ide.com.
This is an operational policy draft for the preview, not legal advice. It should be reviewed for the operator’s jurisdiction before general availability.