Skip to main content

Privacy Policy

Last updated: September 30, 2026

Summary: We take your privacy seriously, especially regarding your proprietary code and data. Shipwright AI only collects data necessary to operate our developer platform. Your code is never used to train our AI models without your explicit, opt-in consent.

1. Introduction

Ship Wright ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy informs you about how we look after your personal data when you visit our website (shipwright.in) and use the Shipwright AI developer platform, services, and applications (collectively, the "Services").

By accessing or using our Services, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

2. The Data We Collect About You

We collect different types of information from and about users of our Services, including:

A. Information You Provide to Us

  • Identity Data: First name, last name, username or similar identifier, title, and company name.
  • Contact Data: Billing address, email address, and telephone numbers.
  • Financial Data: Payment card details and billing information (processed securely by our third-party payment processors like Stripe; we do not store full credit card numbers).
  • Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
  • Content Data: Any text, code, documentation, or other materials you submit through support tickets, community forums, or feedback forms.

B. Information Automatically Collected

  • Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data: Information about how you use our website, products, and services (e.g., feature usage, session durations, clickstreams).

C. Code & Engineering Data

  • Source Code: When you connect a Git repository, we process your source code to provide AI context, run CI/CD pipelines, and generate documentation.
  • Telemetry: Deployment logs, build status, environment variables (stored securely), and infrastructure metrics.

3. AI Data Processing & Code Privacy

Given the nature of Shipwright AI, how we handle your codebase and AI interactions is our top priority.

  • No Unauthorized Training: We DO NOT use your proprietary source code, prompts, or engineering data to train our foundational AI models, nor do we allow our third-party LLM providers to train on your data.
  • Transient Processing: When you use AI features, snippets of your codebase are sent to our LLM providers to generate a response. These snippets are processed transiently and are not retained by the LLM providers beyond the immediate generation request.
  • Knowledge Graph: We maintain an internal, encrypted index (Knowledge Graph) of your codebase within your tenant boundaries to allow the AI to answer architecture-wide questions. This index is isolated from other tenants.
  • Data Ownership: You retain complete ownership of all code, intellectual property, and data you bring to the platform, as well as the output generated by the AI assistant.

4. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Service Delivery: To register you as a new customer, process payments, and deliver the Shipwright AI services.
  • Product Improvement: To use data analytics (on anonymized metadata) to improve our website, products/services, marketing, customer relationships, and experiences.
  • Communication: To manage our relationship with you, including notifying you about changes to our terms or privacy policy, or sending service/security alerts.
  • Security & Compliance: To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).

5. Data Sharing and Sub-processors

We do not sell your personal data. We may share your personal data with the following categories of third parties for the purposes set out in Section 4:

  • Cloud Infrastructure Providers: Such as AWS (Amazon Web Services), where our platform is hosted in the ap-south-1 (Mumbai) region.
  • AI Providers: Such as OpenAI, Anthropic, or Google Cloud (processed strictly under zero-retention API agreements).
  • Payment Processors: Such as Stripe, to securely handle billing.
  • Analytics & Support: Vendors providing customer support software, error tracking, and anonymized product analytics.
  • Legal & Regulatory Authorities: If required by law, court order, or governmental authority.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.

  • Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
  • Access Control: We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
  • Incident Response: We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. When you delete your account, your code, indices, and personal data are soft-deleted immediately and permanently purged from our backups within 30 days.

8. Your Legal Rights (GDPR / CCPA)

Depending on your location (such as the EEA, UK, or California), you may have specific rights under applicable data protection laws, including:

  • Request access to your personal data.
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data.
  • Object to processing of your personal data where we are relying on a legitimate interest.
  • Request restriction of processing of your personal data.
  • Request the transfer of your personal data to you or to a third party (Data Portability).
  • Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us at privacy@shipwright.in.

9. International Data Transfers

Shipwright AI is based in India. By using our Services, you consent to the transfer of information to India and other countries outside of your country of residence, where data protection rules may vary. We ensure appropriate safeguards are in place (such as Standard Contractual Clauses) when transferring personal data internationally.

10. Changes to This Privacy Policy

We keep our Privacy Policy under regular review. We will notify you of any material changes by posting the new policy on this page, updating the "Last updated" date at the top of this policy, and, where appropriate, notifying you via email or in-app notification.

11. Contact Details

If you have any questions about this Privacy Policy or our privacy practices, please contact our Data Privacy team: