Privacy Policy

1. Who is responsible

Shahab Bahreini, operating as GitMind Pro, is responsible for the personal information described in this policy. Contact our privacy contact at support@gitmind-pro.com with privacy questions, requests, or complaints.

2. Data used by the extension

Selected development context

When you generate content, GitMind can send the context you selected to the AI provider you configured. Depending on your settings and use, this can include staged, unstaged, or untracked changes, file names, repository commit history, and custom prompt or issue context. The request is sent directly from your device to that provider; it does not pass through gitmind-pro.com.

The provider’s terms, privacy policy, retention, location, and security practices apply to that request. Review them before using a cloud provider. If you use a local Ollama server or another self-hosted compatible endpoint, the request is sent to that endpoint instead.

API keys and local settings

GitMind uses VS Code SecretStorage for provider keys where available. Depending on your edition and encryption setting, a key can also be stored in VS Code configuration so the extension can use it. GitMind does not send provider API keys to our website or license server. You are responsible for securing, rotating, and backing up your own credentials as appropriate.

Best-effort warning only

GitMind’s sensitive-content scan is a best-effort heuristic review gate. It can flag sensitive-looking selected content so you can review it, change the selection, or unstage files before generating. It does not guarantee detection, redact secrets, prevent a provider from receiving selected material, or replace secret management, code review, CI scanning, or push protection.

3. Information we collect for the website and license service

• Account information: your name, email address, authentication method, password hash if you register with email and password, and account status.
• OAuth information: if you sign in with Google or Microsoft, the identity information those providers return for sign-in, such as your name and email address. We do not receive your Google or Microsoft password.
• License and device information: license key, license status, VS Code machine identifier, device name, operating system, GitMind version, and activation or device-management events.
• Purchase information: transaction, invoice, product, payment-status, and refund records received from Polar. We do not receive or store payment-card numbers.
• Legal-acceptance records: the accepted Terms, Privacy Policy, and Refund Policy versions, acceptance time, source, IP address, and browser user agent, retained to document the acceptance.
• Website, security, and support information: IP address, requested pages, session and security cookies, form submissions, rate-limit and audit data, and messages you send to us.

4. How we use information

We use personal information to create and secure accounts; deliver, activate, validate, and manage licenses; process and reconcile purchases or refunds; provide requested support; send transactional messages; prevent fraud and abuse; maintain the website; comply with legal obligations; and protect our rights and users. We collect and use information only for these reasonable purposes or as otherwise permitted or required by law.

5. Disclosures and international processing

Our website, portal database, and email delivery are self-hosted and operated in Canada. We disclose information only as needed to run the Service, comply with law, protect rights or safety, or complete a business transfer.

• Polar: payment processing, merchant-of-record services, invoices, and refunds.
• Google and Microsoft: optional sign-in services. Google may also receive information through reCAPTCHA when it is enabled, and your browser may request web fonts from Google Fonts.
• Your selected AI provider or endpoint: the selected development context described above is sent directly to that provider or endpoint.

These third parties may process information outside Canada. Their processing is governed by their own terms and privacy policies. Contact us at support@gitmind-pro.com to ask about our policies and practices for service providers that handle personal information outside Canada.

6. Cookies and similar technologies

We use essential session and security cookies to sign you in, protect forms, prevent abuse, and operate the portal. We do not use third-party advertising cookies or product-activity analytics. You can set your browser to block cookies, but the portal may not work correctly.

7. Retention and security

We retain information only as long as reasonably needed for the purposes above, including account and license administration, security, dispute resolution, and legal, tax, or accounting obligations. We then securely delete or anonymize it where appropriate.

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold. No system or transmission is completely secure, and you should not send secrets or unnecessary sensitive information through support forms. We assess privacy incidents and provide any notifications required by applicable law.

8. Access, correction, deletion, and complaints

You may request access to or correction of personal information we hold about you by emailing support@gitmind-pro.com. You may also ask us to delete your account, subject to information we must retain for legal, security, transaction, or dispute purposes. Deleting an account can remove your ability to manage or recover a license.

If we cannot resolve a privacy concern, you may contact the Office of the Information and Privacy Commissioner of Alberta. You may also have additional rights under privacy laws that apply where you live.

9. Changes to this policy

We may update this policy when our practices or legal requirements change. We will post the revised policy here and update the date above. For material changes, we will provide additional notice where practicable.