Privacy Policy

Last updated: September 3, 2025

1. Information We Collect

VSCoder Copilot ("we," "our," or "us") is a mobile application and VS Code extension that provides AI-powered mobile development through secure device pairing and subscription services. We collect the following information:

• Device Information: Device identifiers, operating system information, app version, and device capabilities for connectivity and compatibility.
• Authentication Data: 64-character secure device tokens, pairing codes, and authentication credentials for secure device connections.
• Connection Data: Network information, IP addresses, connection logs, and heartbeat data to establish and maintain device pairing across networks.
• Subscription Data: Google Play purchase tokens, subscription status, billing information, usage counts, and premium feature access tracking.
• Usage Analytics: Daily AI message counts, feature usage statistics, session data, and app performance metrics.
• Communication Data: Messages sent between your devices via our message broker, WebSocket connection data, and command/response logs.
• Error Logs: Technical error information, crash reports, and diagnostic data to improve app stability.
• Discovery Service Data: Device registration information, pairing requests, and connection metadata processed through our discovery service.

2. How We Use Your Information

We use the collected information to:

• Establish and maintain secure connections between your mobile device and VS Code across any network
• Authenticate devices using secure token-based authentication with automatic renewal
• Process and manage subscription payments through Google Play Billing integration
• Track usage limits and provide access to premium features based on subscription tier
• Route real-time messages between your devices through our secure message broker
• Facilitate AI-powered coding assistance through GitHub Copilot integration
• Provide cross-network device discovery through our production discovery service
• Monitor app performance, diagnose technical issues, and improve user experience
• Validate subscription purchases and prevent fraud through server-side verification
• Send important subscription updates, billing notifications, and technical alerts
• Generate usage analytics to optimize app performance and feature development

3. Data Security and Privacy

We implement comprehensive security measures to protect your data:

• End-to-End Encryption: All communications between your devices are encrypted with TLS/HTTPS encryption
• Token-Based Authentication: 64-character cryptographically secure tokens with 24-hour automatic expiry and renewal
• No Code Storage: We do not store, process, or have access to your source code - messages are routed but not retained
• Secure Message Routing: Our message broker facilitates communication but does not permanently store message content
• Subscription Security: Google Play purchase validation with server-side verification and fraud prevention
• Discovery Service Security: Pairing codes expire every 10 minutes and device registrations are automatically cleaned up
• Minimal Data Retention: We only retain data necessary for service functionality and delete expired data automatically
• Production Infrastructure: SSL certificates, secure server infrastructure, and regular security updates

4. Third-Party Services

VSCoder Copilot integrates with the following third-party services:

• GitHub Copilot Integration: Direct integration with GitHub Copilot API for AI-powered coding assistance (GPT-4o, Claude, etc.)
• Google Play Billing: Subscription management, purchase verification, and payment processing through Google Play Services
• VS Code Extension API: Integration with VS Code workspace, file system, and extension ecosystem
• Discovery Service: Our production service at api.vscodercopilot.com.tr for cross-network device pairing
• WebSocket Infrastructure: Real-time communication services for instant message delivery between devices
• SSL Certificate Providers: Let's Encrypt, ZeroSSL, and other certificate authorities for secure HTTPS connections
• Analytics Services: Usage analytics and app performance monitoring to improve service quality

5. Data Retention

We retain data only as long as necessary for service provision and legal compliance:

• Authentication Tokens: 24-hour automatic expiry with secure renewal - no long-term storage
• Pairing Codes: 10-minute expiry for security - automatically deleted after expiration
• Connection Logs: Retained for up to 30 days for troubleshooting and service optimization
• Subscription Data: Retained for the duration of subscription plus 3 years for tax and legal compliance
• Usage Analytics: Anonymized usage data retained for up to 12 months for service improvement
• Error Reports: Retained for up to 90 days for bug fixes and app stability improvements
• Message Broker Data: Messages are routed in real-time and not permanently stored - temporary queue only
• Discovery Service Data: Device registration data automatically cleaned up when connections expire
• Source Code: We never store, retain, or have access to your source code or project files

6. Your Rights

You have the following rights regarding your data:

• Access: Request information about what data we collect from the app
• Deletion: Request deletion of any stored connection logs or error reports
• Opt-out: Disable analytics collection in the app settings
• App Removal: Uninstall the app at any time to stop all data collection

7. Subscription and Billing Policy

VSCoder Copilot operates on a subscription-based model with the following terms:

• Subscription Tiers: Premium Monthly ($9.99/month) and Premium Annual ($99.99/year) with unlimited AI conversations and advanced features
• Free Trial: 1-day free trial available for new premium subscriptions - full access during trial period
• Google Play Billing: All subscriptions are processed through Google Play Billing with secure payment processing
• Subscription Management: Cancel anytime through Google Play Store - no cancellation fees
• Usage Limits: Free tier limited to basic features - premium subscriptions provide unlimited access
• Auto-Renewal: Subscriptions automatically renew unless cancelled before the next billing cycle
• Refund Policy: Refunds subject to Google Play Store refund policies - contact Google Play support for refund requests
• Server-Side Validation: All subscription purchases are validated server-side to prevent fraud and ensure legitimate access

8. International Data Transfers

If you are located outside of Turkey, please note that we may transfer your personal data to Turkey and other countries for processing. We ensure appropriate safeguards are in place to protect your data during such transfers in accordance with applicable data protection laws.

9. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have it removed.

10. Limitation of Liability and Disclaimers

Important limitations regarding our service and your use of VSCoder Copilot:

• No Warranty: VSCoder Copilot is provided "AS IS" without warranties of any kind, express or implied
• No Liability for Damages: We are not responsible for any direct, indirect, incidental, special, or consequential damages
• Code and Data Loss: We are not responsible for any loss, corruption, or damage to your code, files, or data
• Service Interruptions: We are not liable for service outages, connection failures, or temporary unavailability
• AI-Generated Content: We are not responsible for accuracy, reliability, or consequences of AI-generated code or suggestions
• Third-Party Integrations: We are not responsible for issues arising from GitHub Copilot, Google Play, or other third-party services
• Device Security: Users are responsible for securing their own devices and maintaining proper security practices
• Business Use: We are not liable for any business losses, lost profits, or commercial damages
• Maximum Liability: Our total liability shall not exceed the amount paid for your subscription in the 12 months prior to the claim

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.

12. Contact Information

If you have questions about this privacy policy or our data practices, please contact us:

• Email: emir-baycan@hotmail.com
• Website: https://emirbaycan.com.tr