← Back to Home

Privacy Policy

Last Updated: December 6, 2025

1. Introduction

This Privacy Policy explains how Copilot Assistant ("we", "our", "the Extension") collects, uses, and protects your information when you use our Visual Studio Code extension.

We are committed to protecting your privacy and maintaining transparency about our data practices.

2. Information We Collect

2.1 Information Collected by the Extension

The Extension collects the following data locally and transmits to our servers only for license validation:

• Machine ID: A hashed identifier unique to your computer (non-reversible, non-personally identifiable)
• License Key: Your Pro license key (if purchased)
• Usage Statistics:
  • Number of queries performed (for free tier limit enforcement)
  • Trial start date (to track 7-day free trial)
  • Last query timestamp (for hourly rate limiting)
  • Pro status (whether you have an active license)
• Activation Data: Timestamp of license activations and machine count (to enforce 3-machine limit)

2.2 Information Collected During Purchase

When you purchase a Pro license through our website:

• Email Address: Required to deliver your license key
• Payment Information: Processed by Stripe (we never see your credit card details)
• Purchase Timestamp: Date and time of transaction

2.3 Information We DO NOT Collect

We explicitly DO NOT collect:

• ❌ Your source code or project files
• ❌ File names or directory structures
• ❌ Log contents or application data
• ❌ Browsing history or web activity
• ❌ Personal information (name, address, phone number)
• ❌ VS Code settings or configuration
• ❌ Extension usage patterns beyond basic query counts

3. How We Use Your Information

We use the collected information solely for:

• License Validation: Verifying your Pro license status every 24 hours
• Usage Limit Enforcement: Tracking query counts for free tier (10/hour limit after trial)
• Trial Period Management: Determining if you're within the 7-day trial window
• Activation Limit Enforcement: Ensuring licenses are not used on more than 3 machines
• License Delivery: Sending your license key via email after purchase
• Customer Support: Helping you with license issues or technical problems
• Fraud Prevention: Detecting tampering attempts or unauthorized license sharing

4. Data Storage and Security

4.1 Local Storage

Usage statistics and license information are stored locally on your machine in VS Code's global state storage. This data:

• Is encrypted with checksums to prevent tampering
• Is not accessible to other applications
• Persists across VS Code restarts
• Can be cleared by uninstalling the Extension

4.2 Cloud Storage

License data transmitted to our servers is stored in AWS DynamoDB with:

• Encryption at rest using AWS KMS
• Encryption in transit using TLS 1.2+
• Regular automated backups
• Access restricted to authorized systems only

4.3 Payment Processing

All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor. We never store or have access to your credit card information.

5. Data Retention

• License Data: Retained indefinitely to support perpetual licenses
• Email Addresses: Retained for license recovery and support purposes
• Usage Statistics: Stored locally only, not retained on our servers
• Payment Records: Retained by Stripe per their retention policy (7 years for financial records)

6. Data Sharing

We do NOT sell, rent, or share your personal information with third parties, except:

• Stripe: For payment processing (email and payment details)
• AWS: For infrastructure hosting (license data only)
• Legal Obligations: If required by law or to protect our rights

We do not use your data for marketing, advertising, or analytics beyond what's necessary for the Extension to function.

7. Your Rights

You have the right to:

• Access: Request a copy of your stored license data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your license data (will deactivate your license)
• Portability: Receive your license key in a portable format
• Objection: Object to processing of your data (may affect service functionality)

To exercise these rights, contact us at support@copilot-assistant.net.

8. GDPR Compliance (EU Users)

If you are located in the European Union:

• Legal Basis: We process your data based on contractual necessity (to provide the service you purchased)
• Data Controller: Copilot Assistant is the data controller
• Data Processing Agreement: AWS and Stripe are our data processors
• International Transfers: Data may be processed in the United States (AWS us-east-1 region) under Standard Contractual Clauses
• Right to Lodge Complaint: You can file a complaint with your local data protection authority

9. Children's Privacy

The Extension is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you are a parent and believe your child has provided us with personal information, contact us to request deletion.

10. Cookies and Tracking

Our website uses minimal tracking:

• Stripe Session Cookies: Required for checkout functionality (temporary, deleted after purchase)
• No Analytics: We do not use Google Analytics, Facebook Pixel, or similar tracking
• No Advertising: We do not serve ads or use retargeting pixels

The Extension itself does not use cookies or browser-based tracking.

11. Security Measures

We implement industry-standard security measures:

• TLS encryption for all data in transit
• AWS KMS encryption for data at rest
• Checksum validation to detect tampering
• Regular security updates and patches
• Limited access to production systems
• CloudWatch monitoring for suspicious activity

However, no system is 100% secure. Use strong passwords and keep your license key confidential.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be:

• Posted to this page with an updated "Last Updated" date
• Notified via Extension update notes (for material changes)
• Effective immediately upon posting

Continued use of the Extension after changes constitutes acceptance of the updated policy.

13. Contact Information

For privacy-related questions, data requests, or concerns:

• Email: support@copilot-assistant.net
• Website: https://copilot-assistant.net
• Response Time: We aim to respond within 48 hours

14. Third-Party Services

The Extension relies on these third-party services:

• Stripe: Payment processing - Stripe Privacy Policy
• AWS: Cloud infrastructure - AWS Privacy Notice
• AWS SES: Email delivery for license keys

These services have their own privacy policies, which we recommend reviewing.

15. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed (we do NOT sell data)
• Right to opt-out of sale (not applicable - we don't sell data)
• Right to deletion
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, email us at support@copilot-assistant.net.