Privacy Policy

1. Data Controller Information

This Privacy Policy is issued by KODARI BEST AI S.R.L. ("we," "our," "us"), a Romanian limited liability company:

2. Legal Basis for Processing

We process personal data under the following legal bases:

• Contract Performance: To provide our services and manage your account
• Legal Obligations: To comply with tax, accounting, and regulatory requirements
• Legitimate Interests: For security, fraud prevention, and service improvement
• Consent: For marketing communications and analytics (where applicable)

3. Information We Collect

Account Information

• Email address
• Username
• OAuth provider identifiers (Discord, GitHub)
• Profile picture (if provided)
• Account creation date and last login

Service Usage Data

• Plugin creation sessions and generated code
• Chat conversations with AI
• Compilation logs and error reports
• File uploads and project structures
• Token usage and balance

Technical Data

• IP address and approximate location
• Browser type, version, and language
• Operating system and device information
• Access times and referring URLs
• Cookie identifiers

Discord Bot Hosting Data

• Discord bot tokens (encrypted at rest)
• Bot source code and configuration files
• Hosting metadata (start/stop times, resource usage)

Note: We do not access or store data your bot collects from Discord users. You are responsible for your bot's data handling practices.

4. Public Profile Information

When you create an account, certain information is publicly visible on your profile page:

• Display name
• Profile picture
• Bio (if you add one)
• Account creation date
• Discord ID (if you link Discord)
• Supporter roles/badges

This information can be viewed by anyone visiting your public profile. Your email address is never publicly displayed.

5. How We Use Your Information

• Providing AI-powered code generation services
• Processing payments and managing subscriptions
• Storing and organizing your projects
• Hosting and running your Discord bots
• Sending service updates and notifications
• Preventing fraud and ensuring security
• Complying with legal obligations
• Improving our services through analytics
• Responding to support requests

6. Data Sharing and Transfers

We share your data only with:

International transfers are protected by Standard Contractual Clauses or adequacy decisions.

7. Your Rights Under GDPR

You have the right to:

To exercise these rights, contact us at support@kodari.ai. We respond within 30 days.

8. Data Retention

Account Deletion: When you request account deletion, your data is retained for 30 days. During this period, you can restore your account by simply logging back in. After 30 days, all data is permanently and irreversibly deleted.

9. Data Security

We implement appropriate technical and organizational measures:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Access controls and authentication systems
• Regular security audits and penetration testing
• Incident response procedures
• Employee training and confidentiality agreements
• Data minimization and pseudonymization where possible

10. Cookies and Tracking

We use the following cookies:

Strictly Necessary (no consent required)

• Authentication token — keeps you logged in
• OAuth state — secures the login process
• Cookie consent preference — remembers your cookie choice

Optional (require consent)

• Referral tracking — remembers how you found Kodari so we can reward the person who referred you
• Ad attribution — tracks which ad brought you here so we can measure our marketing

You can manage your cookie preferences through the consent banner shown on your first visit or the "Cookie Preferences" link in our footer.

11. Children's Privacy

Our service requires users to be at least 13 years old, per Minecraft's and Discord's policies. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us immediately.

12. Data Breach Notification

In case of a personal data breach, we will:

• Notify ANSPDCP within 72 hours of awareness
• Inform affected users without undue delay if high risk
• Document all breaches and responses
• Implement measures to prevent recurrence

13. Third-Party Services

Our service integrates with third parties who have their own privacy policies:

• OpenRouter - AI model access
• Tebex - Payment processing
• Discord/GitHub - OAuth authentication

We are not responsible for third-party privacy practices.

14. Updates to This Policy

We may update this policy to reflect legal, technical, or business changes. Material changes will be notified via email or service announcement with 30 days notice.

15. Supervisory Authority

You have the right to lodge complaints with:

16. Contact Us

For privacy-related inquiries: