Privacy Policy

Who we are

Easy Claude Code is a product of Corporate AI Solutions, a brand of Global Buildtech Australia Pty Ltd (ABN 54 672 395 685), 76-84 Brunswick Street, Fortitude Valley QLD 4006, Australia — the legal entity that collects and holds the information described here. Privacy contact: dennis@corporateaisolutions.com.

What we hold

• Account — your email address and the GitHub identity you sign in with.
• Repository connection — the GitHub authorisation that lets the tool act on repositories you connect, and a list of which ones you connected.
• Your Anthropic API key — stored so a run can use your own key rather than ours. It is the most sensitive thing this tool holds.
• Work data — the tasks you describe, project metadata, session state and any documents you upload.
• Run logs — what was dispatched, to which repository, and what came back.

Where it goes

GitHub — work runs on GitHub Actions runners in your repositories, and your API key is written to the repository as a secret so the run can use it. Anthropic — the code and instructions in a run are sent to the Claude API using your key. Supabase (database, Sydney) and Vercel (hosting, United States) hold the application data described above. We do not sell personal information and we do not use it to train models.

How long

For as long as your account exists. Deleting your account from Settings removes the stored key, repository connection and project data; run logs are removed with it. Backups roll off within 35 days.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or have it deleted. Write to the privacy contact above; we respond within 30 days. Complaints may be made to the Office of the Australian Information Commissioner at oaic.gov.au.

Security

Data is encrypted in transit and at rest, and stored keys are not displayed back to you. Because a run can write to your repositories, we recommend branch protection on production repositories — that control matters more here than any promise we can make about our own systems. If a breach occurs that is likely to cause serious harm we will notify affected users and the OAIC as required by the Notifiable Data Breaches scheme.