Privacy Policy

1. Who we are

CodeFracture is operated by Sapelo AI. This policy explains what personal data the platform holds about the people who use it, why, and how long it stays.

2. What we hold

• Account data. Your name, email address, organization, a hash of your password if you set one, your second-factor secrets if you enrol them, and the identity provider you connect if you sign in with one.
• Sessions and keys. The sessions you open, the API keys you mint, and the IP address and user agent each was last used from, so you can see and revoke them.
• Audit records. Who changed what in your organization and when. These outlive the organization so that a purge is itself accountable.
• Workload telemetry. The logs, metrics and traces your workloads emit are stored under your organization for the retention period you configure. What they contain is up to your code.
• Email. Sign-in links, invitations and alerts are sent through a transactional email provider, which receives your address and the message.

3. Why we hold it

To run your account and your workloads, to secure them (rate limiting, session revocation, second factors), to bill paid plans, to notify you when something you asked to be told about happens, and to meet legal obligations. We do not sell personal data and we do not use it for advertising.

4. Where it lives

Control-plane data is stored on infrastructure we operate in the United States. Object storage and telemetry are held with our storage providers under their own security commitments. Access is limited to operators who need it to run the service.

5. How long

Account data stays while the account exists. Sessions expire on their own schedule and can be revoked at any time. Telemetry is deleted at the end of its retention window. Closing an organization schedules a purge of everything it owns except the audit trail of the purge itself.

6. Your choices

You can view and change your profile, revoke sessions and keys, disconnect identity providers and close your organization from the console. To ask for a copy of your data, or for its deletion beyond what the console offers, write to privacy@sapelo.ai.

7. Cookies

The console sets the cookies needed to keep you signed in and to route you consistently to the version of a workload you are previewing. It sets no advertising or third-party tracking cookies.

8. Changes

When this policy changes we update the effective date above and, for material changes, tell signed-in users in the console. The Terms of Service govern the rest of the relationship.