Security
Your code,
Stays yours
Giving an AI tool access to your codebase is a serious decision. Here is exactly what Codor does — and does not do — with your code.
We built Codor for professional developers working on real projects. That means security and privacy are not afterthoughts — they are part of the architecture.
01
Indexing is local
When Codor indexes your project, it happens entirely on your machine. The index is stored locally and never uploaded to our servers. We only see what you explicitly send in a request.
02
We do not train on your code
Your code is never used to train or fine-tune any model — ours or anyone else's. Each session is transient. When the session ends, the context is gone.
03
Requests are encrypted in transit
All communication between the extension and our API uses TLS 1.3. Requests are processed and discarded — we do not log the content of your code.
04
Minimal data collection
We collect what we need to run the service: your account info, usage metrics (number of requests, credit consumption), and basic diagnostics. Nothing more.
05
Payment data never touches our servers
Billing is handled entirely by our payment processor. We never see or store your card details.
06
GDPR compliant
We are registered in the Czech Republic (EU) and fully comply with GDPR. You can request access to, correction of, or deletion of your data at any time.
Vulnerability disclosure
If you discover a security vulnerability in Codor, please report it responsibly. We will acknowledge your report within 48 hours and work to resolve it promptly.
[email protected]