Privacy Policy

Data Collection

CodeSage collects only the data necessary to provide its examination services:

• GitHub account data — Your username, email, and profile image via GitHub OAuth. Used solely for authentication.
• Repository URLs — The URLs of repositories you submit for analysis. We clone, parse, and embed your code for examination purposes only.
• Exam sessions — Your answers, scores, and generated questions. Stored locally and in our vector database to provide scoring and study guides.

How Your Code is Used

Your codebase is cloned, parsed into an abstract syntax tree (AST), and embedded into a vector database for semantic search. The AI models use this context to generate examination questions and evaluate your answers. Your code is never used to train any models, shared with third parties, or made publicly accessible.

Data Storage

All data is stored in encrypted databases and vector stores. Repository clones are temporary and deleted after embedding. Exam sessions and scores are retained indefinitely unless you choose to delete them. API keys are stored encrypted and never transmitted in plain text.

Third-Party Services

• GitHub — OAuth authentication and repository cloning via the GitHub API.
• NVIDIA NIM — AI model inference for embedding, reranking, question generation, scoring, and safety. Prompts are not retained beyond the request lifecycle.
• Qdrant — Vector database for code embedding storage and retrieval.

Cookies and Sessions

CodeSage uses session cookies for authentication only. No tracking cookies, analytics, or advertising cookies are used. Session data is stored securely and expires on sign-out.

Data Deletion

You can delete your data at any time from the Settings page. This removes all repositories, exam sessions, scores, and associated vector embeddings. Account deletion removes your GitHub OAuth connection. Data deletion is permanent and irreversible.

Open Source

CodeSage is open source. You can review the full codebase at github.com/DanielDeshmukh/CodeSage to verify our privacy practices.