Privacy Policy

1. Who we are

Robosapien Limited ("RoboSapien", "we", "us", "our") is a company registered in England and Wales (Company No. 16079321). We operate the products UrbanCode, MarketCode, and LangCode. This policy explains how we collect, use, and protect your personal data when you use our websites and services.

2. What data we collect

Account information: email address, name, and password hash when you create an account.
Authentication data: OAuth tokens when you sign in via Google.
Usage analytics: pages visited, features used, session duration, and device information collected via PostHog.
Conversation data: prompts, queries, and AI-generated responses created during your use of our products.
Contact information: name, email, and message content when you use our contact form.
Payment information: billing details processed securely by Stripe. We do not store card numbers.
Error and performance data: error logs and performance metrics collected via Sentry.

3. How we use your data

Service delivery: to provide, maintain, and improve our products.
Authentication: to verify your identity and manage account access.
Analytics: to understand how our products are used and to improve user experience.
Communication: to respond to your enquiries and send service-related updates.
Security: to detect, prevent, and address technical issues and security threats.

4. Legal basis for processing (GDPR)

We process your personal data under the following legal bases:

Contract: processing necessary to provide the services you have requested.
Legitimate interests: analytics, security, and product improvement.
Consent: marketing communications and non-essential cookies (you can withdraw consent at any time).

5. Third parties

We share data with the following categories of service providers:

Google (OAuth): authentication provider.
Stripe: payment processing.
PostHog: product analytics.
Sentry: error monitoring and performance tracking.
Amazon Web Services (AWS): cloud infrastructure and data hosting.

We do not sell your personal data. Third-party processors are contractually bound to handle your data securely and only for the purposes we specify.

6. Data retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

7. Your rights

Under GDPR and UK data protection law, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data ("right to be forgotten").
Restrict or object to processing.
Data portability — receive your data in a machine-readable format.
Withdraw consent at any time (where processing is based on consent).
Lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

We use essential cookies to operate our services and optional analytics cookies (PostHog) to understand usage patterns. You can manage your cookie preferences via the cookie consent banner displayed on first visit, or through your browser settings.

9. International transfers

Your data may be processed outside the UK/EEA by our service providers. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).

10. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "last updated" date.

12. Contact

For privacy-related enquiries, data access requests, or to exercise your rights, contact us at: privacy@robosapien.ai