CoopAI

Privacy Policy

Last updated: May 29, 2026

This Privacy Policy describes how CoopAI ("Coop," "we," "us") collects, uses, and protects information when you use our website at coop-ai.dev, the CoopAI VS Code extension, and related services (collectively, the "Services").

1. Information we collect

Website visitors

When you visit coop-ai.dev, we may collect:

  • Contact information you submit through demo requests, waitlist forms, or chat widgets (name, email, company, role, message)
  • Usage analytics via Vercel Analytics — aggregated page views, referrers, and performance metrics. We do not use third-party advertising trackers.
  • Technical data such as browser type, device type, and IP address (may be processed by our hosting provider, Vercel, for delivery and security)

Extension and server users

When you use the CoopAI VS Code extension with a Coop server, we process:

  • Repository metadata — file paths, ownership, dependency graphs, commit history, and PR metadata indexed via webhooks and background jobs
  • Code excerpts — selected file content and line ranges you include in chat prompts or quick actions, transmitted to your Coop server for context assembly
  • Prompts and completions — chat messages and AI responses, routed through your Coop server to LLM providers for inference
  • Authentication credentials — Coop API tokens stored in VS Code SecretStorage; LLM provider keys stored on the server (not in the extension)
  • Integration data — Slack messages, ticket references, and other organizational context when integrations are configured
  • Usage metadata — token counts, model selection, request timestamps, and cost estimates for billing and monitoring

2. How we use information

We use collected information to:

  • Provide, operate, and improve the Services
  • Route inference requests to LLM providers on your behalf
  • Build and maintain repository knowledge graphs
  • Respond to demo requests, support inquiries, and waitlist signups
  • Monitor service health, security, and performance
  • Comply with legal obligations

We do not use your code, prompts, or completions to train machine learning models.

3. LLM provider processing

When you use chat or quick actions, code context and prompts are transmitted from your Coop server to third-party LLM providers (such as Anthropic, OpenAI, or Google) for inference. These providers process data under their respective API terms. Coop applies zero-retention configuration flags to requests where supported. See our Security page for details.

If you use BYOK (Bring Your Own Key), inference is routed through your organization's provider account and governed by your agreement with that provider.

4. Data retention

  • Website form submissions are stored in Google Sheets (when configured) or server logs until you request deletion
  • Graph and repository index data is retained for the duration of your subscription or deployment, unless you request deletion
  • LLM inference data is processed transiently; Coop configures requests to disable conversation storage and training use. Provider-side retention varies by provider and contract
  • BYOK audit logs are retained for 90 days and contain no prompts, responses, or code content
  • Analytics data is aggregated and retained per Vercel Analytics policies

5. Data sharing

We share information only with:

  • LLM providers — to perform inference you request (Anthropic, OpenAI, Google, and others as configured)
  • Infrastructure providers — Vercel (website hosting), and your chosen deployment environment for the Coop server
  • Code host platforms — GitHub, GitLab, Bitbucket for webhook and API access you authorize
  • Chat integrations — Slack or similar, when configured by your organization

We do not sell personal information. We do not share data with advertisers.

6. Self-hosted deployments

Enterprise customers may deploy the Coop server on infrastructure they control. In self-hosted deployments, repository data, graph indexes, and inference traffic remain within your environment. This Privacy Policy still applies to data you submit through our website and any Coop-operated services.

7. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access personal information we hold about you
  • Request correction or deletion of your personal information
  • Object to or restrict certain processing
  • Data portability
  • Withdraw consent where processing is consent-based

To exercise these rights, contact us at hello@coop-ai.dev.

8. Cookies and tracking

Our website uses Vercel Analytics, which collects anonymized usage data without cookies for basic analytics. If you configure a live chat widget (Tawk.to), that provider may set cookies to maintain chat sessions. You can manage cookies through your browser settings.

9. Children

The Services are not directed to individuals under 16. We do not knowingly collect personal information from children.

10. International transfers

If you access the Services from outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate. We take steps to ensure appropriate safeguards for such transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date. Material changes will be communicated via email or in-product notice where appropriate.

12. Contact us

Questions about this Privacy Policy? Contact hello@coop-ai.dev.