Governance
Privacy Policy
Last updated: July 2026
Legal Review Draft Notice
This privacy policy is a draft statement for CoderXP Milestone 1. Formal legal compliance statements (e.g. GDPR, CCPA certifications) will be finalized after legal review.
1. Information Collection
CoderXP collects minimal account information (email, OAuth authentication metadata) necessary to operate the application.
2. API Credentials & BYOK Data
User-supplied API keys (OpenAI, Anthropic, Gemini, DeepSeek) will be stored using server-side AES-256-GCM encryption and used solely to proxy LLM requests on the user's behalf. (Planned architecture)
3. Local Models Data
Requests sent to local model endpoints (Ollama, LM Studio) remain entirely within your local network environment.