Privacy Policy

Last updated: 14 May 2026 · Aptivate Pty Ltd (ABN 42 686 342 147)

1. Overview

Aptivate Pty Ltd ("we", "us", "our") operates MoxyCode. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We are committed to protecting your privacy and handling your data with care.

2. Information We Collect

We collect the following information when you use MoxyCode:

• Email address — used for authentication and account management
• Usage data — number of AI requests made, features used, and request dates
• Device information — a device fingerprint used to manage active sessions
• Payment information — processed and stored securely by Stripe; we never store card details

3. Your Code and Data

In Online Mode, code snippets and error messages are sent to our backend to generate AI-powered fixes. These are processed in real time and are not stored permanently.

In Offline Mode, all processing happens entirely on your local machine. No code, errors, or output are transmitted to our servers.

We do not sell, rent, or share your code with any third parties.

4. How We Use Your Information

• To authenticate you and manage your account
• To enforce usage limits and plan entitlements
• To process payments via Stripe
• To send transactional emails (magic links, receipts)
• To improve the Service based on aggregated, anonymised usage patterns

5. Third-Party Services

We use the following third-party services:

• Stripe — payment processing. Stripe's privacy policy applies to payment data.
• Supabase — database and authentication infrastructure, hosted on AWS.
• Resend — transactional email delivery.

6. Data Retention

We retain your account data for as long as your account is active. Usage logs are retained for 90 days. If you delete your account, all personal data is removed within 30 days.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at [email protected]. If you are in the EU or UK, you also have rights under GDPR.

8. Security

We use industry-standard security practices including HTTPS, HTTP-only secure cookies, and bcrypt password hashing. Authentication tokens expire after 15 minutes. We regularly review our security practices.

9. Cookies

We use a single HTTP-only session cookie for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email. The date at the top of this page reflects the most recent update.

11. Contact

For privacy-related questions or requests, contact us at [email protected].