What happens to your code and data

You stay in charge

• Nothing is built until a person confirms a plan.
• Adaptl prepares a normal pull request and never merges by itself. Your team merges.
• What Adaptl says about your product points to where it came from, and people confirm or correct it.
• Rules your team sets in Adaptl apply to changes that go through Adaptl. Merging directly on GitHub is outside them.

What Adaptl reads

• To understand your product online: your file list, dependency files, build and deployment settings, and your pull requests and issues.
• To draw rough screens that match your product: your style files. Owners and admins can turn this off for each project.
• Not the rest of your code. Hosted Adaptl doesn't read your product code to draw its map.
• On your own computer: a project model of file names and facts, kept inside your repository's .git folder, with no AI and no file contents.

What goes to an AI provider

• When you use an AI feature, the relevant text and code of that change go to the AI provider set for your team: Anthropic, or the one you choose with your own key.
• Those requests may be processed in the United States.
• Your coding agent reads the code it works on, under that agent's own terms. It runs on your computer, on the pull request or, for teams with online builds switched on, in your team's private box on Adaptl's servers.
• Your team's AI key is stored encrypted.

Your customers' data

• Previews that Adaptl builds are filled with made-up people and records.
• If your team uses a preview your own host deploys, its data is whatever that host has.
• If you connect a tool such as an error tracker, Adaptl reads its reports with personal details removed by pattern matching, which can miss some, such as a name. Those details are kept for 90 days after an error was last seen, or as long as an idea made from it exists.

Where it's kept

• The app, its database and its previews run in the EU, in Stockholm, Sweden.
• Each team's data is kept apart in the database itself, and everything travels over HTTPS.
• Passwords are hashed, and tokens and keys are encrypted.
• Code from outside your own repository never runs without a recorded yes from the person reviewing it.

Who processes it

The full list, with what each company does and where, is in our privacy policy.

Leaving and deleting

• Deleting your account removes your login and every team you alone own, with everything in it.
• Disconnecting a tool deletes its token and what Adaptl read from it.
• Your code stays in your repository, and every change is a normal pull request, so nothing is locked inside Adaptl.
• Ask for a copy or for deletion at privacy@adaptl.ai. We answer within one month.