Privacy Policy
Last updated: August 23, 2026
Affinify ("we", "us") operates KODA and related products. This policy explains what data we process, why, and the choices you have. It applies to the public website, authenticated workspaces, and APIs.
Who is responsible
Affinify is the data controller for KODA accounts and billing. Infrastructure providers (hosting, database, LLM routing) act as processors under contract. Contact: privacy@affinify.com.
Data we collect
Account data (email, name, auth identifiers), workspace content you submit (code, messages, files), usage and billing metadata, technical logs (IP, device, timestamps), and cookies described in our Cookie Policy.
How we use data
To provide and secure the service, authenticate users, route LLM requests, bill subscriptions, prevent abuse, improve reliability, and comply with law. We do not sell personal data.
AI and third-party models
When you use IRA, Chat, or Codex, prompts and context may be sent to model providers (e.g. OpenRouter) solely to fulfill your request. Provider terms and retention apply. Configure models and permissions before sending sensitive data.
Retention
We keep data while your account is active and as needed for billing, security, and legal obligations. You may request deletion subject to backups and lawful holds.
Your rights
Depending on your region (LGPD, GDPR, etc.), you may access, correct, export, restrict, or delete personal data, and object to certain processing. Contact privacy@affinify.com to exercise rights.
International transfers
Data may be processed in Brazil, the United States, or other regions where our subprocessors operate. We use appropriate safeguards where required by law.
Changes
We may update this policy. Material changes will be announced on the site or by email when appropriate. Continued use after the effective date constitutes acceptance.