Privacy Policy

Personal Information

When you use CodeSynapse, request a demonstration, create an account, or communicate with us, we may collect personal information that you voluntarily provide to us. This may include:

• Name
• Email address
• Phone number
• Company name
• Job title
• Account and login information
• Contact details
• Billing information, where applicable
• Any other information you choose to provide to us

Usage and Technical Data

We may automatically collect information about your use of CodeSynapse, including:

• IP address
• Browser and device information
• Operating system
• Login and authentication activity
• Application activity
• Error and diagnostic information
• Usage statistics
• Security and access logs

We may collect this information through cookies, log files, analytics tools, and similar technologies.

Repository and Documentation Data

When you connect CodeSynapse to a supported source-code repository or documentation platform, CodeSynapse may process information made available through that connection.

Depending on the integrations and permissions configured by you or your organization, this may include:

• Source code
• Repository and file metadata
• File paths and repository structure
• Function and class definitions
• API endpoints and signatures
• Configuration information
• Environment-variable names
• Dependency and version information
• Documentation content
• Markdown files
• Wiki pages
• Commit and change information
• Pull request information
• Other technical information required to identify and analyze documentation drift

The information processed depends on the repositories and documentation sources that you choose to connect to CodeSynapse.

Integration Credentials

CodeSynapse may use OAuth tokens, API tokens, installation credentials, or similar authorization mechanisms to connect to third-party services.

These credentials are used only to provide the requested integrations and functionality.

We do not sell or rent integration credentials.

We use the information collected to:

• Provide access to CodeSynapse and its features
• Authenticate users and connected integrations
• Analyze source code and documentation
• Identify potential documentation drift
• Extract technical facts from connected repositories
• Compare documentation against available code evidence
• Generate proposed documentation corrections
• Provide evidence supporting proposed corrections
• Facilitate approved documentation updates
• Provide customer support
• Monitor and improve the performance and reliability of CodeSynapse
• Detect and prevent security incidents, fraud, abuse, or unauthorized access
• Communicate with customers and users
• Comply with applicable legal and regulatory requirements

CodeSynapse may use artificial intelligence and machine-learning technologies to assist with documentation analysis and generation.

We are designed to minimize the amount of customer information provided to AI models. Where AI processing is required, this may include limited extracted technical facts and the specific documentation content or context necessary for the requested analysis.

Customer source code, documentation, and other Customer Content are not used to train general-purpose AI models unless expressly agreed with the customer in writing.

Where third-party AI or machine-learning providers are used to provide CodeSynapse functionality, such providers may process limited information on our behalf and subject to applicable contractual and confidentiality requirements.

For purposes of this Privacy Policy, “Customer Content” means source code, documentation, repository information, technical information, and other content that a customer or its authorized users make available to CodeSynapse.

Customers retain ownership of their Customer Content.

Scalex does not acquire ownership of Customer Content as a result of providing CodeSynapse.

We process Customer Content only as necessary to provide CodeSynapse, perform requested analyses, generate proposed documentation updates, maintain security and reliability, provide support, comply with applicable law, or otherwise as authorized by the customer.

CodeSynapse is designed with human review and approval before documentation changes are applied.

The identification of documentation drift or generation of a proposed correction does not by itself modify the customer’s repository or documentation.

Where a customer or authorized user approves a proposed change, CodeSynapse may write the approved change back to the relevant repository or documentation platform according to the configured integration and permissions.

Customers remain responsible for reviewing and approving proposed changes.

We may use your personal information to:

• Respond to inquiries
• Provide customer support
• Provide information about CodeSynapse
• Communicate about your account or subscription
• Send service-related notifications
• Send promotional communications where permitted by applicable law

You may opt out of promotional communications by following the instructions provided in those communications.

We may continue to send non-promotional communications necessary to provide the Service.

We may use aggregated or anonymized information to:

• Understand how CodeSynapse is used
• Monitor system performance
• Identify trends
• Improve our products and services
• Develop new features and functionality

We do not use Customer Content to publicly identify customers or disclose confidential customer information.

We do not sell Customer Content or personal information.

We may share information in the following circumstances.

Service Providers

We may share information with trusted third-party service providers who assist us in operating, maintaining, securing, and improving CodeSynapse.

These providers may include services for:

• Cloud hosting
• Infrastructure
• Authentication
• Monitoring
• Analytics
• Customer support
• Communication
• Payment processing
• AI or machine-learning processing

Such providers are expected to process information only for the purposes for which we engage them and to maintain appropriate confidentiality and security measures.

Business Transfers

In the event of a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction, information may be transferred as part of that transaction.

Where required by applicable law, we will provide appropriate notice regarding such transfer.

Legal Requirements

We may disclose information where required by applicable law, regulation, court order, legal process, or valid request from a government or public authority.

We may also disclose information where reasonably necessary to protect our rights, property, security, users, customers, or others, or to investigate fraud, security issues, or misuse of the Service.

Third-Party Integrations

CodeSynapse may integrate with third-party services including:

• GitHub
• GitLab
• Bitbucket
• Azure DevOps
• Jira
• Notion
• Google Drive
• Confluence
• Other repository, documentation, development, or collaboration platforms that may be supported from time to time

When you connect a third-party service, CodeSynapse may access information according to the permissions and authorization granted by you or your organization.

Third-party services operate under their own terms and privacy policies. We encourage you to review those policies before connecting such services to CodeSynapse.

We implement reasonable technical and organizational measures designed to safeguard personal information and Customer Content against unauthorized access, disclosure, alteration, loss, or destruction.

Depending on the CodeSynapse environment and configuration, these measures may include:

• Access controls
• Authentication and authorization controls
• Encryption in transit
• Encryption at rest where applicable
• Least-privilege access
• Credential protection
• Logging and monitoring
• Backup and recovery controls
• Security incident procedures
• Secure software development practices

However, no method of transmission or electronic storage can guarantee absolute security.

Customers are responsible for maintaining the confidentiality of their account credentials and for appropriately configuring access permissions for connected repositories and third-party services.

Depending on applicable law, you may have rights relating to your personal information, including the right to:

• Access personal information we hold about you
• Request correction of inaccurate information
• Request deletion of personal information where applicable
• Withdraw consent where consent is the applicable basis for processing
• Request information regarding our processing of personal information
• Raise a privacy-related complaint or grievance

You may exercise applicable rights by contacting us using the information provided below.

Where CodeSynapse processes personal information on behalf of a customer or organization, requests concerning that information may need to be directed to the relevant customer or organization.

If you are a California resident and the California Consumer Privacy Act (“CCPA”) applies to our processing of your personal information, you may have certain rights regarding your personal information.

The categories of personal information that CodeSynapse may collect or process include the following, depending on how you interact with CodeSynapse:

Categories of Personal Information

Sources of Personal Information

We may collect personal information from:

• You directly
• Your organization or employer
• Your use of CodeSynapse
• Connected repositories and documentation platforms
• Third-party service providers
• Service providers supporting our website or application
• Publicly available sources, where applicable

Purposes for Collecting Personal Information

We may collect and use personal information for purposes including:

• Providing and operating CodeSynapse
• Account administration
• Authentication and security
• Customer support
• Repository and documentation analysis
• Service improvement
• Analytics
• Communication
• Billing and payment processing
• Fraud prevention and security
• Legal and regulatory compliance

Categories of Personal Information Disclosed

We may disclose the categories of personal information described above to service providers and contractors supporting our business and the operation of CodeSynapse.

Depending on the nature of the relationship, these may include providers of:

• Cloud infrastructure
• Hosting
• Authentication
• Analytics
• Customer support
• Communications
• Payment processing
• Security and monitoring
• AI or machine-learning services

We do not sell personal information for monetary consideration.

California Privacy Rights

Subject to applicable law and applicable exceptions, California residents may have the right to:

• Know the categories and specific pieces of personal information collected about them
• Know the categories of sources from which personal information is collected
• Know the business or commercial purposes for collecting or disclosing personal information
• Know the categories of third parties to whom personal information is disclosed
• Request deletion of personal information
• Request correction of inaccurate personal information
• Opt out of the sale or sharing of personal information, where applicable
• Limit certain uses and disclosures of sensitive personal information, where applicable
• Not receive discriminatory treatment for exercising applicable privacy rights

We do not sell personal information for monetary consideration.

If we engage in any activity that constitutes “sale” or “sharing” under applicable California law, we will provide the applicable notices and opt-out mechanisms required by law.

How to Exercise California Privacy Rights

California residents may submit applicable privacy requests by contacting us using the contact information provided at the end of this Privacy Policy.

We may need to verify your identity before completing a request.

Where CodeSynapse processes personal information on behalf of a customer or organization, the relevant customer may be responsible for responding to the request.

We will respond to verified requests within the time periods required by applicable law.

If you are located in the European Economic Area or another jurisdiction where the General Data Protection Regulation (“GDPR”) applies, personal information processed through CodeSynapse may constitute “Personal Data” under the GDPR.

Depending on the circumstances, Scalex may process personal data as a controller or as a processor on behalf of a customer.

Where Scalex processes personal data on behalf of a customer, the customer may determine the purposes and means of processing, and the applicable data-processing terms may be governed by a separate agreement or Data Processing Agreement.

Depending on applicable law, individuals may have rights including:

• The right to be informed about processing
• The right to access personal data
• The right to request correction
• The right to request deletion
• The right to restrict processing
• The right to object to certain processing
• The right to data portability
• The right to withdraw consent where consent is the applicable legal basis
• The right to lodge a complaint with an applicable supervisory authority

Where personal information is transferred internationally, we will use appropriate safeguards as required by applicable law.

CodeSynapse may store and process information using cloud infrastructure and service providers located in India or other jurisdictions, depending on the Service configuration and infrastructure used.

Where information is transferred across jurisdictions, we will take reasonable steps to comply with applicable data-protection requirements.

Specific data-residency commitments, where applicable, may be provided under the customer’s commercial agreement or Data Processing Agreement.

We retain information for as long as reasonably necessary to provide CodeSynapse and fulfill the purposes described in this Privacy Policy.

The retention period may depend on the type of information, the customer’s configuration, contractual requirements, security requirements, and applicable law.

Customer Content may include repository-derived information, documentation information, findings, proposed changes, logs, and other information required to provide CodeSynapse.

When a customer disconnects a repository or terminates its use of CodeSynapse, Customer Content will be handled in accordance with the applicable deletion and retention procedures and any contractual requirements.

We may retain limited information where necessary to comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, or maintain legitimate security and business records.

We maintain procedures for removing Customer Content and personal information when the applicable retention period expires or when deletion is otherwise required.

Where technically and legally appropriate, information may be removed from active systems and subsequently from backups in accordance with our backup and data-removal procedures.

Certain information may be retained where required by law or reasonably necessary for legitimate security, legal, or business purposes.

We use appropriate technical and organizational safeguards for information stored by CodeSynapse.

Customer Content and personal information may be stored in databases, application infrastructure, logs, backups, and other systems necessary to operate the Service.

Where applicable, information is encrypted in transit and at rest using industry-standard security practices.

Access to Customer Content is restricted to authorized personnel and systems based on business and operational requirements.

If you wish to request deletion of personal information or other information associated with your CodeSynapse account, you may contact us using the contact information provided below.

We will review and verify the request and process it in accordance with applicable law, contractual obligations, and our retention and deletion procedures.

Where CodeSynapse processes Customer Content on behalf of an organization, the organization may be responsible for submitting or managing the deletion request.

Unless expressly agreed with a customer in writing, Scalex does not use Customer Content to train general-purpose artificial intelligence models.

Customer Content is processed to provide CodeSynapse functionality, including documentation analysis, drift detection, evidence generation, and proposed documentation updates.

CodeSynapse or the Scalex website may contain links to third-party websites, applications, or services that are not operated or controlled by us.

This Privacy Policy does not apply to third-party websites or services.

We encourage you to review the privacy policies of those third parties before providing personal information or connecting services.

CodeSynapse is intended strictly for business and professional use and is not directed toward, or intended for use by, children.

We do not knowingly collect, maintain, or process personal information from individuals under the applicable legal age of consent or age of majority in their jurisdiction (including, but not limited to, under 13 in the United States, under 16 in the EEA, or under 18 in jurisdictions like the UK, India, and Brazil).

If you become aware that an individual under the legal age in their jurisdiction has provided us with personal information without appropriate parental or legal guardian consent, please contact us immediately using the information below, and we will take immediate steps to verify, restrict, and permanently delete that information from our systems.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, or applicable laws and regulations.

We will post the updated Privacy Policy on the CodeSynapse website and update the “Effective Date” shown at the beginning of this Policy.

Where required by applicable law, we will provide additional notice of material changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: