Privacy Policy

1Who we are

Cordane is a product operated by Sitedity SRL, a company registered in Romania (“Cordane,” “we,” “us”). For the personal data described here, Sitedity SRL is the data controller.

Questions, requests, or privacy concerns: contact@cordane.ai.

2Your code and secrets never reach us

Cordane runs your AI coding agents, dev servers, and source on workers you own. Even when we host the hub (managed cloud), we operate only the control plane — the board, routing, and coordination. Your data plane — repositories, environment variables, API keys, and everything your agents read or write — stays on your machines and does not pass through or get stored on our servers. Agent API keys you use live on your workers.

3What we collect

Beta access requests

When you use the request-access form, we collect the email address you submit. We use it only to contact you about beta access and to send the invite. We do not sell it, and we don’t add you to a newsletter.

Account data (when you use the product)

Cordane signs you in with GitHub. When you authenticate, we receive the basic profile GitHub provides — such as your GitHub username, name, email, and avatar — to create and identify your account. We do not receive your GitHub password.

Billing data

If and when you pay for Cordane, payments are handled by our payment processor acting as merchant of record. We receive confirmation of your subscription and limited billing details (such as plan and status); we do not receive or store your full card number.

Technical data

Like any web service, our servers keep basic logs — IP address, browser/user-agent, requested URLs, and timestamps — for security, abuse prevention, and diagnosing problems.

4Cookies & tracking

This website (cordane.ai) uses no analytics, advertising, or third-party tracking cookies. It stores a single theme preference (light/dark) in your browser’s local storage, which never leaves your device. The Cordane app uses a strictly-necessary session cookie to keep you signed in. That’s it.

5Why we process your data (legal bases)

Under the GDPR, we rely on:

• Consent — for handling your email when you ask for beta access. You can withdraw it at any time.
• Performance of a contract — to create your account and provide the service you sign up for.
• Legitimate interests — to keep the service secure, prevent abuse, and operate reliably (balanced against your rights).
• Legal obligation — where we must retain records, e.g. for tax or accounting.

6Who we share it with

We don’t sell your personal data. We share it only with the service providers (“sub-processors”) we need to run Cordane, under appropriate agreements. These currently include:

• Fly.io — cloud hosting for our website and control plane.
• GitHub — sign-in (OAuth) for the product.
• Our payment processor — to handle subscriptions and billing (merchant of record).
• An email provider — to deliver beta invites and account email.

We may also disclose data if required by law, or to protect the rights, safety, and security of Cordane and its users. We can provide the current list of sub-processors on request.

7International transfers

Some of our providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) to protect your data.

8How long we keep it

• Beta emails: until you ask us to delete them, or until they’re no longer needed for beta outreach.
• Account data: for as long as your account is active, then deleted or anonymized within a reasonable period, except where we must keep records to meet legal obligations.
• Logs: for a limited period, then rotated out.

9Your rights

If you’re in the EU/EEA, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. Where we rely on consent, you can withdraw it at any time. To exercise any of these, email contact@cordane.ai and we’ll respond within the time the law allows.

You also have the right to lodge a complaint with a supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).

10Children

Cordane is a tool for professional developers and is not directed at children. We don’t knowingly collect personal data from anyone under 16.

11Changes to this policy

We may update this policy as the product evolves. When we make material changes, we’ll update the date at the top and, where appropriate, let you know. Continuing to use Cordane after an update means you accept the revised policy.

12Contact

Sitedity SRL (Cordane) — Romania.
Email: contact@cordane.ai