CodingPlanX

GDPR overview

There is no mention of the GDPR anywhere on this site. Neither GDPR nor CCPA nor Article 27 appears in any of the pages collected; no EU representative is designated, no data protection officer is named, and the privacy policy refers only to applicable laws and regulations without naming any. What stands in its place: section VI announces rights of access, update and correction, exercised by email to contact@codingplanx.ai after identity verification, and states that users may have the right to lodge a complaint with their supervisory authority. Section II foresees international transfers and storage outside the user's country of residence, requiring a comparable level of protection from the recipient; data is otherwise held in Singapore. Section IX disclaims any intention to collect data from minors. The terms elect Singapore law and the exclusive jurisdiction of Singapore courts. No DPA is published.

Who owns the data?

DeepNail Limited, the operator, holds every intellectual property right over the service itself: software, technology, models, code, interfaces and documentation (terms 6.1). The user keeps ownership and the relevant rights over the content they submit (terms 6.2), and the privacy policy confirms that copyright in the input stays with them; input and output together are treated as User Content. The publisher nevertheless reserves the right to store, transfer or train on that content once anonymised, to improve its model. Sharing is described by category rather than by name: affiliates and partners, service providers and processors, authorised agents, professional advisers, public authorities, and any counterparty to a merger, acquisition, reorganisation or financing. No subprocessor is ever named.

Reuse rights

Nothing in the terms assigns the outputs to the publisher, so what a user generates is theirs to reuse without asking permission from CodingPlanX. Three reservations sit on top of that freedom. First, the upstream providers bind the user directly: terms 2.3 requires compliance with the terms of OpenAI, Anthropic, Google, xAI, DeepSeek, Moonshot, Qwen, Z.AI and Ant Group, including their usage restrictions, intellectual property clauses and data protection policies. Second, the user warrants that their input is original or lawfully licensed (terms 6.3). Third, outputs may simply be wrong: terms 7.1 places the duty to evaluate them, and the resulting risk, on the user. Two further limits concern the service rather than the content: it cannot be resold, rented, sublicensed or transferred (terms 4.2.3), and the company's trademarks and domain names may not be used (terms 6.4). Subject to the user's authorisation, the publisher may use submitted content to provide, maintain, develop and improve the service (terms 6.2).

Data retention & training

Hosting summary

Jurisdiction: the terms elect Singapore law and the exclusive jurisdiction of the Singapore courts. Storage: the privacy policy states that, generally, all data related to the account and to the product services, personal information and user content alike, is stored in Singapore. Transfers: the same section expressly provides for storage or transfer outside the user's country of residence, requiring a comparable level of protection from the recipient. No region, data centre or hosting provider is named beyond the country itself, and third parties appear only as categories, never as a named subprocessor list. Announced measures include strictly restricted data centre access, private network channels and proxies, staff dedicated to data protection, and contingency plans with regular drills. Card details are received and stored encrypted by third-party gateways certified PCI-DSS, the publisher keeping only a token and the last four digits. On the network side, the domain resolves to a Cloudflare anycast address, which is a CDN point of presence and not a storage location. No SOC 2 or ISO 27001 certification is mentioned anywhere on the site.