PRIVACY POLICY

This Privacy Policy describes how SwitchCase ("we," "us," or "our") collects, uses, and shares your personal information when you use our website at https://switchcase.ai, our VS Code extension, and related services (collectively, the "Services").

Questions or concerns? Please contact us at legal@switchcase.ai.

Summary of Key Points

• What data do we collect? Email address for authentication, usage data, and data you submit to our AI features.
• Do we collect sensitive information? No. We do not intentionally collect sensitive personal information.
• Do we use AI? Yes. We use third-party AI providers (Anthropic, OpenAI) to power our features. See AI Data Processing for details.
• Do we sell your data? No. We do not sell your personal information.
• Do we use your data to train AI models? We may use anonymized interaction data to improve our services. You can opt out. See AI Data Processing.
• Who owns AI-generated code? You do. See AI Data Processing.
• What are your rights? Depending on your location, you may have rights to access, correct, delete, or port your data.

Table of Contents

1. What Information Do We Collect?

Information You Provide Directly

• Account Information: Email address (required for authentication via OTP)
• AI Inputs: Code, prompts, and other content you submit to our AI features
• Communications: Information you provide when you contact us for support

Information Collected Automatically

• Usage Data: How you interact with our Services, features used, and actions taken
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, and referring URLs
• Location Data: Approximate location based on IP address (country/region level)
• Session Recordings: If you consent to analytics cookies, Microsoft Clarity may record your on-screen activity (mouse movements, clicks, scrolling) to help us identify usability issues

Information from Third Parties

We receive information from the following third-party services:

• Analytics Providers: Google Analytics and Microsoft Clarity provide aggregated usage analytics (only if you consent to analytics cookies)
• Payment Processor: Paddle (our Merchant of Record) handles all payment processing and shares limited transaction data necessary to provide our Services
• Authentication Services: AWS Cognito processes authentication requests

Sensitive Information

We do not intentionally collect sensitive personal information (such as racial or ethnic origin, religious beliefs, health data, or financial account numbers). Please do not submit sensitive personal information, credentials, API keys, secrets, or confidential business information to our AI features. We are not responsible for any sensitive data you voluntarily submit.

2. How Do We Use Your Information?

We use your information for the following purposes:

• Provide Services: To create and manage your account, authenticate you, and deliver our AI coding assistant features
• Process Transactions: To process payments through our payment processor Paddle
• Improve Services: To understand usage patterns, fix bugs, and improve our Services
• Model Improvement: To improve our AI services using anonymized, aggregated interaction data (you can opt out)
• Communications: To respond to your inquiries and send service-related communications
• Security: To detect, prevent, and address fraud, abuse, and security issues
• Legal Compliance: To comply with applicable laws and legal obligations

We do not use your data for behavioral advertising or profiling.

3. AI Data Processing

SwitchCase uses artificial intelligence to provide coding assistance features. This section explains how your data is processed when you use our AI features.

AI Service Providers

We use the following third-party AI providers to process your requests:

• Anthropic (Claude): Primary AI model for code generation and analysis
• OpenAI (GPT): Secondary AI model for certain features
• Tavily: Web search capabilities for research features

What Data Is Sent to AI Providers?

When you use our AI features, the following may be sent to our AI providers:

• Your prompts and questions
• Code snippets and files you submit for analysis
• Context from your workspace necessary to provide relevant responses

Ownership of AI-Generated Code

You own all AI-generated code outputs. Any code generated by our AI features in response to your prompts belongs to you. We do not claim any ownership rights over AI-generated outputs. You are free to use, modify, distribute, and commercialize any code generated through our Services.

AI Data Retention and Training

• Our Retention: We may log AI interactions for debugging, abuse prevention, and service improvement. These logs are retained for up to 90 days.
• Model Improvement: We may use anonymized, aggregated data from AI interactions to improve our services and potentially fine-tune AI models. This data is processed in a way that does not identify individual users. You can opt out of this by contacting us at legal@switchcase.ai.
• Provider Retention: Each AI provider has their own data retention policies. As of our last review:
  • Anthropic: Does not use API data to train models by default
  • OpenAI: Does not use API data to train models by default

AI Provider Privacy Policies

• Anthropic Privacy Policy
• OpenAI Privacy Policy
• Tavily Privacy Policy

Important AI Disclaimers

DO NOT submit the following to our AI features:

• Passwords, API keys, secrets, or credentials
• Personal health information or medical records
• Financial account numbers or payment card data
• Social Security numbers or government IDs
• Confidential business information or trade secrets
• Information about third parties without their consent

4. Third-Party Services

We use the following third-party services to operate our business:

These third parties process data on our behalf under contractual obligations to protect your information. For payment processing, Paddle acts as the Merchant of Record and is the data controller for payment data. See Paddle's Privacy Policy.

5. When Do We Share Your Information?

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (as listed above)
• Legal Requirements: If required by law, court order, or government request
• Safety: To protect the rights, property, or safety of SwitchCase, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission

We do not sell your personal information. We do not share your personal information with third parties for their direct marketing purposes.

6. Cookies and Tracking

We use cookies and similar tracking technologies only if you consent. For detailed information, please see our Cookie Policy.

7. Do Not Track

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Because there is no uniform standard for DNT signals, we do not currently respond to DNT browser signals.

However, we provide you with control over analytics tracking through our cookie consent banner. If you reject analytics cookies, no tracking scripts will be loaded regardless of your browser's DNT setting.

8. Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this policy:

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Secure authentication via AWS Cognito
• Regular security assessments
• Access controls and logging

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Children's Privacy

Our Services are not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete that information promptly. If you believe we have collected information from a child under 18, please contact us at legal@switchcase.ai.

11. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Opt-Out: Opt out of certain processing activities, including AI model training
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, please contact us at legal@switchcase.ai. We will respond to your request within 30 days. If your request is complex or you have made multiple requests, we may need up to 60 days but will notify you of any extension.

12. GDPR Rights (EU/UK Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Bases for Processing

• Contract: Processing necessary to provide our Services to you
• Legitimate Interests: Processing for our legitimate business interests (security, fraud prevention, service improvement) where not overridden by your rights
• Consent: Processing based on your consent (e.g., analytics cookies, model training), which you may withdraw at any time
• Legal Obligation: Processing required by law

Your GDPR Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right not to be subject to automated decision-making

International Transfers

Your data may be transferred to and processed in the United States and other countries. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

Complaints

You have the right to lodge a complaint with your local data protection authority. A list of EU data protection authorities is available at https://edpb.europa.eu.

13. CCPA/CPRA Rights (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights:

Categories of Personal Information Collected

Your CCPA/CPRA Rights

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate information
• Right to Opt-Out: Opt out of sale or sharing of personal information (we do not sell or share your data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Do Not Sell or Share

We do not "sell" or "share" personal information as defined under CCPA/CPRA. We do not use your personal information for cross-context behavioral advertising.

How to Exercise Your Rights

To exercise your rights, email us at legal@switchcase.ai. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

14. Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top. If we make material changes, we will notify you by email or by posting a prominent notice on our Services prior to the change becoming effective.

Your continued use of the Services after any changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: