Privacy Policy for Diff Forge AI.

Who We Are

Diff Forge AI provides a project-focused workspace for coding agents, local project context, billing, account access, and related cloud-enabled workspace features. References to Diff Forge AI, we, us, and our mean the developer and operator of the Diff Forge AI app and service.

Information We Collect

We collect information you provide directly, information generated by your use of the product, and information from service providers needed to operate the product.

• Account information, such as your name, email address, authentication identifiers, session state, and OAuth provider details when you sign in with a supported provider.
• Billing information, such as plan status, Stripe customer or subscription identifiers, checkout status, invoices, entitlement state, and credit balance or usage summaries. Payment card details are handled by Stripe and are not stored by Diff Forge AI.
• Workspace information, such as workspace names, project or repository labels, enabled workspace tools, MCP server metadata, agent/session state, process status, diagnostics, and related project context you choose to attach or sync.
• User-provided content, such as prompts, task instructions, specs, notes, file references, diffs, uploaded or attached content, and other content you intentionally submit to the app or connected workspace features.
• Voice input information when you choose to use audio features, such as microphone audio or generated transcription text needed to turn speech into prompts or commands.
• Device, app, and technical information, such as IP address, browser or device type, operating system, app version, installed PWA/TWA state, cookies, local storage, logs, crash reports, and security or abuse-prevention signals.

How We Use Information

• To create and secure your account and authenticated sessions.
• To provide dashboard access, workspace features, sync, status, and support.
• To process subscriptions, checkout, billing status, credits, and entitlements.
• To route prompts, files, diffs, specs, and workspace context to features or providers you choose to use.
• To transcribe audio input when you enable voice features.
• To diagnose bugs, measure reliability, prevent abuse, and improve product quality.
• To comply with legal obligations, enforce terms, and respond to valid requests.

How We Share Information

We do not sell personal and sensitive user data. We share information only as needed to provide the product, comply with law, protect users, or complete actions you request.

• With infrastructure, authentication, database, hosting, storage, logging, support, and security providers that help operate Diff Forge AI.
• With Stripe or other payment processors for checkout, subscription management, invoicing, taxes, fraud prevention, and payment support.
• With coding agent, model, transcription, MCP, preview, or integration providers when you configure or use those features and intentionally send data through them.
• With legal, compliance, safety, or business-transfer recipients when required by law, to protect rights and security, or as part of a merger, acquisition, financing, or sale of assets.

Local Project Data

Diff Forge AI is designed around project workspaces. The app may access local project files, diffs, terminal output, process state, MCP configuration, and preview state so you can operate coding agents in one workspace. Local project content is used for the features you choose, and may be transmitted only when you use cloud sync, connected providers, hosted runtime features, or other integrations that require data to leave your device.

Cookies and Local Storage

Diff Forge AI may use cookies, local storage, and similar technologies to keep you signed in, remember app state, support PWA installation, protect sessions, and improve reliability. You can control cookies and storage through your browser or device settings, but some product features may stop working if required storage is disabled.

Data Retention and Deletion

We retain account, billing, workspace, diagnostic, and support information for as long as needed to provide Diff Forge AI, maintain security, comply with legal obligations, resolve disputes, and enforce agreements.

You can request deletion of your account and associated user data through the account deletion request page or by emailing privacy@diffforge.ai. We may need to verify account ownership before deleting data. Some records may be retained where required or permitted for security, fraud prevention, payment records, tax, accounting, dispute resolution, backups, or legal compliance.

Security

We use reasonable technical and organizational safeguards to protect personal and sensitive user data, including encrypted transmission where data is sent over the network. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Children and Privacy

Diff Forge AI is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information to Diff Forge AI, contact us so we can take appropriate action.

International Processing

Your information may be processed in the United States, Canada, or other locations where we or our service providers operate. Data protection laws in those locations may differ from the laws where you live.

Changes to This Policy

We may update this Privacy Policy as Diff Forge AI changes or as legal requirements evolve. When we make material updates, we will update the effective date and provide notice when appropriate.

Contact

For privacy questions, requests, or complaints, contact Diff Forge AI at privacy@diffforge.ai.