CodeMate AI

GDPR overview

The privacy policy carries a dedicated RIGHTS UNDER THE GDPR (EUROPEAN UNION) section listing access, rectification, erasure, restriction, portability, objection, rights around automated decision-making and profiling, withdrawal of consent and the right to lodge a complaint. A data protection officer is designated under Article 37 and reachable at contact@codemate.ai. Requests are answered without undue delay within one month, extendable by two, and free of charge unless manifestly unfounded or excessive; the policy links to the EU supervisory authority directory and to the UK ICO. It also names CCPA, COPPA and India's DPDPA, describes processing agreements with its own vendors and contractual safeguards for transfers to the United States. Two gaps: no Article 27 EU representative is named, and the SOC 1, SOC 2, ISO 27001 and HIPAA audits cited belong to Microsoft Azure as host, not to CodeMate.

Who owns the data?

CodeMate's terms assert no ownership over your Contributions: you retain full ownership of them. Its USER DATA clause still lets the vendor keep some of the data you transmit to manage service performance, with routine backups, while disclaiming any liability for loss or corruption — you also waive any right of action. The privacy policy allows sharing with employees, insurers, advisers, agents, partners and suppliers where necessary, names Meilisearch and OpenAI as vendors, and shares user keys with Truto. A data protection officer answers at contact@codemate.ai. The terms name CodeMate Inc, the privacy policy A2S Innovate Tech Private Limited, so the effective controller is unclear.

Reuse rights

Because you keep ownership of your Contributions, you can reuse your own inputs and the code the tool produces without asking permission. Build Pro lets you download the generated source code outright and deploy it instantly behind a shareable link, and BUILD Teams adds a custom domain. Two limits apply: Contributions you post publicly are covered by a licence granted to CodeMate under sections 9 and 10 of the terms, and CodeMate retains the intellectual property rights over the service itself. Redistributing the service or significant content at scale requires an enterprise licence, obtained by writing to contact@codemate.ai. Separately, the privacy policy lets you opt out of some data sharing through your privacy settings or by contacting the vendor.

Data retention & training

Hosting summary

Hosting runs on Microsoft Azure: Blob Storage for files and content, Cosmos DB for structured data, with encryption keys available through Azure Key Vault and access controls through Azure Active Directory. The privacy policy states that data at rest sits primarily in data centres in the Mumbai region, India, while the terms state that "the Services are hosted in United States" — the site never reconciles the two. Cross-border transfers to United States vendors such as OpenAI are described as necessary for data analysis, machine learning and added functionality. Announced measures include regular backups, physical and environmental security, regular security audits, employee training and confidentiality agreements; the SOC 1, SOC 2, ISO 27001, HIPAA and GDPR certifications quoted are Azure's, not CodeMate's. Enterprise customers may self-host the Knowledge Base on their own infrastructure, single-tenant, on-premise, on Kubernetes or Docker. The privacy policy names A2S Innovate Tech Private Limited in Noida, India, where the terms name CodeMate Inc in Delaware.