International privacy policy

Regional account and purchase rules

The country determined from your current IP address selects the regional documents and payment provider. Language does not change that selection. A VPN can change the detected region. The supplier and payment provider shown when a purchase is created determine the terms for that purchase. Accounts, projects and the glyph balance are shared between regional access points. Using another region requires reviewing its applicable documents before purchasing; previous purchases retain their original supplier and payment provider.

The shared account and service database is hosted in Amazon Web Services eu-north-1 (Sweden). Requests through the Russian access point are forwarded to that shared infrastructure. The detected country is recorded with the document version and acceptance time. Payment providers receive the information required to process your purchase under their own terms and privacy notices.

1. Who is responsible

SELFORB W.L.L, Bahrain commercial registration 163604-1, is responsible for personal information processed to operate CodeGryphon for international customers covered by our international terms. Our registered address is Office 413, Building 125, Road 1702, Block 317, Diplomatic Area, Manama, Kingdom of Bahrain. Contact support@codegryphon.ai about privacy or your information.

Paddle is separately responsible for information it processes as the seller and payment provider. Its Privacy Policy applies to Paddle checkout, payment and buyer support. Other suppliers’ privacy notices apply to accounts or purchases governed by their terms.

2. Information we process

We process your account and contact details; authentication and account settings; project content, files, prompts and outputs submitted to the service; authorised integration information; usage and glyph records; technical and security logs; and support correspondence.

For purchases we receive information needed to fulfil and record the order, such as the transaction identifier, account or customer reference, package, amount, currency, payment or refund status and receipt information. Paddle and its payment partners process card details. CodeGryphon does not receive your full payment-card number or card security code through Paddle checkout.

You choose which content and integrations to supply. Do not include personal information you are not authorised to process, or secrets that are unnecessary for the requested task. Connected tools can provide information within the permissions you grant.

3. Purposes and grounds

We use information to create and authenticate accounts, perform requested AI and software tasks, maintain project context, deliver purchases, record usage, respond to support requests and administer the service. This processing is necessary to provide the requested service and fulfil our agreement with you.

We also process necessary information for security, fraud prevention, service reliability and diagnostics based on our legitimate interests, and for accounting, tax and other legal obligations. Where consent is required, including optional marketing, we request it separately. You may withdraw consent without affecting earlier lawful processing.

We do not publish identifiable customer content or use it to train our own models without a separate permission or agreement. External AI providers process submitted content according to their applicable service terms and data policies.

4. Recipients and international processing

Information needed for the requested service may be processed by hosting, storage, email, security and support providers; AI-model providers; authorised technical operators; and integrations you connect. Paddle and its payment partners process purchase information. We may disclose information when legally required or necessary to protect legitimate rights and investigate abuse.

Processing may occur outside Bahrain in locations used by hosting, AI or integration providers. Where applicable law requires safeguards or additional consent for a transfer, these must be provided before that processing. Third-party services may act as independent controllers for their own processing.

5. Retention and security

We retain information for the period needed for its stated purpose: account and project information while the service is used, technical records for security and diagnostics, and purchase or agreement records for applicable accounting, legal and dispute requirements. Deletion requests may be subject to those requirements and the normal cycle of removing backup copies.

We use access controls and appropriate technical and organisational measures to protect information. No service can guarantee absolute security. Keep authentication credentials private and promptly report suspected unauthorised access.

6. Your choices and rights

You may request access, correction or deletion of your information and, where applicable, portability, restriction or objection to processing. You may withdraw optional consent and disconnect integrations. Contact support@codegryphon.ai from your account email and describe the request. We may need proportionate information to verify that it comes from the account holder.

Some information is needed to provide the service; removing it may prevent continued use. Mandatory record-retention duties and other lawful exceptions may limit deletion. You may complain to the relevant data-protection authority where applicable. The service is intended for adults and is not directed to children.

The website uses necessary functionality and may use analytics as described in its applicable notices and consent controls. Material changes to this policy will be communicated through the service or account contact details.

With your separate permission, Google Analytics records page visits, new email-confirmed registrations and server-confirmed credited purchases using pseudonymous browser and account identifiers. Advertising measurement is an additional optional choice; ad personalisation is disabled. We do not send chat messages, project names, source code, email addresses or OTP codes. You can reject optional measurement or change it using the Cookies control on the website and web application. Only future eligible events are sent; rejecting measurement does not block product access. Google may process the measurement data under its own service policies: https://policies.google.com/technologies/partner-sites.

Supplier and support

For Paddle purchases, payment and refund processing are governed by Paddle Buyer Terms and Paddle Privacy Policy. Billing help is available at Paddle buyer support.