Privacy Policy

Effective 3 July 2026 · crenya is operated by Codfatherlogic LLP, India.

What we collect

Account data — your email and a hashed password (or your Google/GitHub/Apple identity if you sign in with them).
Payment records — plan, amount, and Razorpay payment/order ids. We never see or store your card/UPI details; Razorpay processes the payment.
Code you index — if you use codebase search (@codebase), the files you index are stored (as text chunks and embeddings) so search works. They are deleted when you re-index (removed files), delete your account, or automatically after 90 days without re-indexing.
Prompts and completions — sent to our AI model providers to generate your response, and retained by us only as operational metrics (token counts) needed to run the service and enforce your plan limits. We do not sell your data.

Processors

We use Razorpay (payments), AI model providers (to generate responses to your requests), email delivery, error monitoring, and cloud hosting providers as processors. Requests to AI providers carry the content needed to answer them, not your account identity. Content you send is handled by those providers under their own terms, which govern how they may retain or use it. We do not sell your data, and we do not train models of our own.

Your rights (DPDP Act, 2023)

Deletion — delete your account from the console (or email us); this deletes your account data and all indexed code. Payment records are retained (anonymised from your profile) as required by Indian tax law.
Access/correction — email us to access or correct your data.
Grievance — reach our grievance officer (Codfatherlogic LLP) at hello@crenya.ai. We respond within 7 working days.

Security & retention

Data is stored on managed cloud infrastructure with encrypted transport, hashed passwords, and daily off-site backups. Account data is kept while your account exists; indexed code until you remove it or delete your account; payment ledger entries for the statutory record-keeping period.

Breach notification

If a breach affects your personal data we will notify you and the Data Protection Board of India as required by the DPDP Act.

Terms · Privacy · Refunds · Contact