Privacy Policy

Last updated: July 5, 2026

NeuralSarathi (“we”, “us”, or “our”) operates the Sarathi autonomous coding agent and the website at neuralsarathi.io(the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account information

When you create an account, we collect the email address and name provided by you or your chosen identity provider (GitHub). We also receive a unique identifier from that provider.

Subscription and billing information

If you subscribe to a paid plan, we process payment through Dodo Payments, our Merchant of Record. We do not store your full card number on our servers — Dodo Payments handles card data and provides us with a tokenized identifier, your billing email, and transaction records.

License and usage data

To issue and validate license keys, we store the keys we issue to your account, their expiration dates, and an optional hardware fingerprint if you choose to bind a license to a specific machine.

What we do NOT collect

Sarathi is a local-first application. Your source code, project files, prompts you send to models, and the code Sarathi generates never pass through our servers. They stay on your machine. We do not have access to them.

2. How We Use Information

• To create and manage your account
• To issue, validate, and renew license keys
• To process subscription payments and prevent fraud
• To provide customer support when you contact us
• To send essential service notices (security, billing, legal)

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We rely on the following providers, each governed by their own privacy policies:

• Supabase — authentication and database hosting
• Dodo Payments — payment processing (Merchant of Record)
• Google Cloud — application hosting (Cloud Run)
• GitHub — OAuth identity provider

4. Data Retention

We retain your account information for as long as your account is active. If you request account deletion, we remove your personal data within 30 days, except where retention is required for legal, accounting, or fraud-prevention purposes.

5. Your Rights

You may, at any time:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing

To exercise any of these rights, email support@neuralsarathi.io.

6. Security

We protect your data using industry-standard measures: encrypted transit (TLS), encrypted secrets storage for license-signing keys, row-level database access controls, and scoped cloud permissions. No method of transmission or storage is 100% secure, but we work to protect your information using reasonable safeguards.

7. Children's Privacy

The Service is not directed to anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy.

9. Contact

Questions about this policy? Email support@neuralsarathi.io.