Privacy Policy

This policy explains what information Compot (“Compot”, “we”, “us”) collects when you use this website and the Compot app at app.compot.tech (together, the “Service”), how we use it, and the choices you have. If you have questions, write to us at info@compot.tech.

Information we collect

Account information. When you sign up, we collect your name, email address and, if you sign in with GitHub, your GitHub username and profile picture.

Your content. The files, designs, components, styles, comments, version history and other material you and your teammates create in Compot.

Connected repositories. When you connect a GitHub repository, we access the code and files in it that Compot needs to show and edit your components, and we use the permissions you grant to pull changes and open pull requests on your behalf.

AI provider keys. If you add an API key for an AI provider, we store it encrypted and use it only to send requests to that provider for you.

Billing information. Payments are handled by our payment processor. We receive your billing details and payment status, but we do not store full card numbers.

Usage and technical data. Like most online services, we log information such as your IP address, browser and device type, the pages and features you use, and errors, so we can run, secure and improve the Service.

How we use information

• To provide the Service: store your work, show it to your teammates, and sync it with GitHub.
• To run the AI agent and the MCP server when you or your tools ask them to.
• To process payments and manage trials and subscriptions.
• To keep the Service secure, prevent abuse, and fix problems.
• To answer your questions and send you important messages about your account.
• To understand how the Service is used and make it better.
• To meet legal obligations.

We do not sell your personal information, and we do not use it for advertising.

AI providers, GitHub and MCP

When you ask the agent for a change, Compot sends what it needs, such as your request, the relevant code and design context, to the AI provider you chose, using your own API key. That provider processes it under its own terms and privacy policy.

When you connect GitHub, data moves between Compot and GitHub as you direct, for example when you pull the latest code or open a pull request. When you connect an MCP client, such as Claude Code or Cursor, that client can read and change the files you give it access to.

Who can see your information

• Your team. People in your workspace can see the files they have access to, and your name on edits, comments and pull requests.
• Service providers. Companies that help us run Compot, such as hosting, storage, email and payment providers. They may use your information only to provide their services to us.
• Services you connect. GitHub, your AI provider and your MCP clients, as described above.
• Legal reasons. When required by law, or to protect the rights, safety and security of our users, the public or Compot.
• Business changes. If Compot is involved in a merger, acquisition or sale of assets, your information may be transferred as part of it, and this policy will continue to apply.

Cookies

The Compot app uses cookies and similar technologies that are needed to keep you signed in and keep the Service secure. This website does not use advertising cookies.

How long we keep information

We keep your information while your account is active. When you delete your account or ask us to delete your data, we delete it or make it anonymous within a reasonable time, unless we need to keep some of it to meet legal obligations, resolve disputes or enforce our agreements. Copies in backups are removed on our regular backup cycle.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or limit how we use it. You can update most account details in the app, and you can disconnect GitHub, remove API keys or delete your account at any time. To make any other request, email info@compot.tech. We may need to confirm your identity first. You can also complain to your local data protection authority.

Security

We use reasonable technical and organizational measures to protect your information, including encryption of API keys and data in transit. No system is perfectly secure, so we cannot guarantee absolute security.

International transfers

We and our service providers may process your information in countries other than the one you live in. When we do, we take steps to protect it as this policy describes.

Children

The Service is not meant for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will change the date at the top, and if the changes are significant, we will tell you by email or in the app before they take effect.

Contact

Questions or requests about privacy: info@compot.tech.