Privacy Policy

Effective Date: July 23, 2026

At N3MO Code Intelligence ("Company", "we", "us", or "our"), your privacy and the security of your intellectual property are our highest priorities. This Privacy Policy outlines how we collect, use, and protect your information.

1. Information We Collect and Consent

We only collect the absolute minimum data required to operate the Service. By using N3MO, you consent to the processing of the following information for the specified purposes:

• Account Data: When you authenticate via GitHub, we collect your GitHub Profile ID, username, email address, and avatar URL to provision your account and provide the service.
• Payment Data: Payment processing is handled entirely by our secure third-party provider, Razorpay. We do not store or process your credit card numbers on our servers.
• Usage Telemetry: For SaaS users, we collect anonymized metrics regarding indexing speed and request counts to enforce subscription limits and monitor system health.

2. Strict Code Processing Policy

Our entire infrastructure is designed around the principle of "Zero Stored Source Code".

• Ephemeral SaaS Processing: When a Pull Request is analyzed, your code is securely cloned into an isolated, ephemeral GitHub Action runner. The code is parsed in-memory to extract structural dependencies. Once the analysis is complete, the runner and the cloned source code are instantly and permanently destroyed.
• Metadata Storage: We only store the resulting structural Abstract Syntax Tree (AST) metadata (e.g., function definitions, line numbers, caller relationships) in our PostgreSQL database. Your raw proprietary source code text is never stored in our databases.
• Enterprise (BYOR): If you use our Enterprise Zero-Trust tier, the processing happens entirely within your Virtual Private Cloud. We have zero access to your code or metadata.

3. Information Sharing, Cross-Border Flows, and Subprocessors

We will never sell or rent your personal information to third parties. We only share information with trusted subprocessors required to run the service. Please note that data may be transferred and processed in data centers outside of your region (e.g., United States or Europe) via our secure subprocessors:

• GitHub: For OAuth authentication, Webhooks, and ephemeral Action runners.
• Razorpay: For secure payment processing and subscription management.
• Hosting Providers: Our API and databases are hosted on highly secure, compliant infrastructure (Vercel, Supabase, AWS).

4. Security Practices

We employ industry-standard security measures, including HTTPS encryption in transit, encrypted databases at rest with Row Level Security (RLS) enabled on all internal tables, and strict JWT-based authentication. We regularly audit our systems to prevent unauthorized access.

5. Data Retention

We retain your Account Data and AST metadata only for as long as your account is active and necessary to provide the service. If you cancel your subscription or request account deletion, all associated personal data and metadata are securely deleted from our active databases within 30 days. Ephemeral code analyzed during PRs is deleted instantly after processing.

6. User Rights (GDPR, CCPA, & DPDP Act)

Depending on your jurisdiction, including the EU (GDPR), California (CCPA), and India (Digital Personal Data Protection Act, 2023), you as a Data Principal / Data Subject have the right to access, update, correct, or delete your personal information, as well as the right to withdraw consent for processing. To exercise these rights or withdraw consent, please contact our Grievance Officer.

7. Contact Us & Grievance Officer

In compliance with the DPDP Act and other global privacy laws, we have appointed a Grievance Officer to address any concerns regarding your personal data processing. We aim to respond to all grievance requests and privacy inquiries within 30 days. If you have any questions or wish to exercise your data rights, please contact:

Grievance Officer: Raj Shekhar
Email: legal@n3mo.shop