Privacy Policy

Effective date: April 10, 2026

1. Introduction

This Privacy Policy describes how Charlesberry Group ("we", "us", "our") collects, uses, and protects your information when you use CodeTours ("the Service"). We are committed to handling your data responsibly and transparently.

2. Information We Collect

Account Information

When you create an account, we collect your email address and a hashed version of your password. We do not store passwords in plain text.

Code You Submit

When you generate a tour, we temporarily store the source code you provide. This code is used solely for the purpose of generating and displaying your tour. Code is retained only for the duration of your tour's retention period, after which it is permanently deleted.

Generated Content

We store the tour content generated from your code, including step descriptions, code references, and audio narration files, for the duration of the tour's retention period.

Usage Data

We collect basic usage data such as page views, tour generation requests, and error logs to operate and improve the Service. This data does not include the contents of your code.

3. How We Use Your Information

We use the information we collect to:

  • Provide and operate the Service, including generating and displaying code tours
  • Authenticate your account and manage your session
  • Send transactional emails (e.g., tour completion notifications) if you have opted in
  • Monitor and improve the reliability and performance of the Service
  • Enforce our Terms of Service

We do not sell your personal information or code to third parties.

4. Third-Party LLM Providers

To generate tours, your code is sent to third-party large language model providers (such as Google Gemini) for analysis and narration. These providers:

  • Do not train their models on your code or data. Your submissions are processed for inference only and are not used to improve or fine-tune their models.
  • May temporarily process your code in memory during the analysis request, but do not retain it after the request completes.

We select LLM providers whose data handling policies align with this commitment. You should not submit code containing sensitive secrets, credentials, or personal data that should not be processed by third-party services.

5. Data Storage and Security

Your data is stored on secure infrastructure. We use industry-standard practices to protect your information, including:

  • Encrypted connections (HTTPS) for all data in transit
  • Hashed passwords (never stored in plain text)
  • Signed session cookies for authentication
  • Access controls limiting who can view stored data

No system is perfectly secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security.

6. Data Retention

Tour data (including stored code, generated content, and audio files) is retained based on your plan tier:

  • Free: 5 days
  • Basic: 15 days
  • Premium: 45 days
  • Enterprise: Custom

After the retention period, tour data is permanently deleted. Account information is retained as long as your account is active. You may request deletion of your account and associated data at any time.

7. Cookies

We use cookies for:

  • Authentication: A session cookie to keep you logged in
  • CSRF protection: A token cookie to prevent cross-site request forgery

We do not use tracking cookies or third-party advertising cookies.

8. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Export your tour data before it expires

To exercise any of these rights, contact us at contact@charlesberry.org.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Effective date" at the top of this page indicates when the policy was last updated.

11. Contact

If you have questions about this Privacy Policy, contact us at contact@charlesberry.org.