What we hold, and what we cannot hold

What never reaches us

• Provider API keys. Stored in vscode.SecretStorage on your machine. Never logged, never transmitted to us, never proxied.
• Your code and prompts. Requests go from your editor directly to the provider you seated. We operate no inference proxy, so there is no request body for us to store — and no way for us to meter your token usage even if we wanted to.
• Plans and audit trails. PLAN.md, EXECUTION.md and everything under memory/ are ordinary files in your repository.

What we do hold

• Account data. Email address, a password hash, and the plan you are on. Needed to sign you in and bill you.
• Billing records. Handled by our payment processor; we retain invoices and the last four digits of a card, never the full number.
• Extension telemetry. Off unless you turn it on. When on, it reports anonymous, aggregate counts — extension version, VS Code version, which commands ran — with no prompt content, file paths, or provider identities.
• Support correspondence. What you send us, kept while the issue is open and for a reasonable period after.

Who else is involved

Three kinds of third party, and no others: the model providers you seat (governed by their terms, since you are their customer), our payment processor, and our transactional email sender. We do not sell data, we run no advertising, and we do not use your data to train anything.

Your controls

Export or delete your account data from Billing or by asking us. Deletion removes the account, its billing history subject to statutory retention, and any telemetry associated with it. Files on your machine are yours; deleting your account does not touch them.