Privacy Policy

1. Who controls your data

ERGO CODE, trading through the UsageX product, is the data controller for the personal data covered by this policy.

If we process personal data solely on behalf of a business customer, that customer may be the controller and ERGO CODE may act as processor. Business customers may contact us to request a data processing agreement.

2. Data we process

• Account and contact data: name, email address, authentication identifiers, plan, support messages, and communication preferences.
• Billing and transaction data: plan, invoice and payment status, country, VAT details, and transaction references. Full payment-card details are handled by the payment provider shown at checkout rather than stored by us.
• Local workspace content and outcomes: your repository remains on the linked computer. The local UsageX agent reads or changes only the approved workspace as needed for the requested operation. UsageX does not maintain a cloud mirror of your repository.
• Transient ChatGPT app relay content: when you use the UsageX ChatGPT app, our cloud relay (hosted with Supabase/infrastructure providers) may temporarily process task instructions, bounded repository context or file excerpts, exact prepared edits, verification requests, and execution results so they can move between ChatGPT and your paired device. Unclaimed relay requests normally expire after 10 minutes; claimed requests and their results may be retained until they complete or are reconciled. Terminal relay records are eligible for automated deletion after approximately 30 days.
• Usage and technical data: feature events, task and run identifiers, selected provider/model, plugin selections, timing, error and diagnostic information, browser or device information, IP address, request logs, and security events.
• Pseudonymous telemetry: UsageX replaces a stable account identifier with a keyed pseudonymous identifier and records limited event data such as routing choice, provider/model, timing, token counts, error state, plugin identifiers, and task length. Telemetry filters secrets and does not store prompts, clarification text, code, files, chat messages, or generated outcomes. Pseudonymisation reduces direct identification but is not the same as irreversible anonymisation.
• Data from integrations: information returned by a plugin or third-party service at your direction, limited by that service's permissions and your request.

Please do not submit passwords, API keys, payment-card data, special-category data, regulated records, or personal data you are not authorised to process. UsageX may filter obvious secrets, but no automated filter is perfect.

3. Purposes and legal bases

Where we rely on legitimate interests, we balance those interests against your rights. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.

4. AI systems and plugins

UsageX is an AI-assisted coding and optimisation service. To carry out a ChatGPT app request, relevant task instructions, bounded context or file excerpts, prepared edits, verification requests, and results may pass through the transient UsageX cloud relay between ChatGPT and the paired local agent. Relevant content may also be processed by supported OpenAI services under their applicable terms, privacy terms, account settings, and data controls. UsageX does not use this private task content to train a public foundation model.

Plugins can be connected through supported OpenAI/Codex integrations. A plugin may send selected context to its own third-party service. We show plugin use in the interface where supported. Review the plugin's permissions and privacy notice before use.

ERGO CODE does not use private prompts, files, or outputs to train a public foundation model unless we first obtain an explicit opt-in. We may use pseudonymous, privacy-sanitised operational data to improve reliability and efficiency. See our AI Transparency Notice for more detail.

5. Codex limits

Policy, in short: UsageX does not attempt to circumvent Codex limits, rate limits, usage windows, account restrictions, or provider safeguards. We do not create or increase quota, reset limit windows, rotate accounts to avoid limits, or impersonate unsupported clients. We use authorised access and connect ChatGPT and Codex for a better coding loop. Lower usage, when it happens, is a consequence of removing redundant work within the limits already available to you.

UsageX Maximize does not reset, bypass, inflate, or otherwise get around provider-defined Codex usage limits. ChatGPT can read and search a repository, plan the change, and hand Codex a prompt that already contains the relevant files and code. Codex then executes and tests. Any reduction in Codex usage comes from not asking Codex to rediscover the repository, not from altering OpenAI account limits.

6. Recipients and international transfers

We disclose data only as needed to provide the service, follow your instructions, protect users, or comply with law. Recipients may include:

• AI providers, including OpenAI, for requested task execution;
• Supabase for authentication and the transient ChatGPT-app relay/task coordination described above;
• hosting, infrastructure, security, email, support, and payment providers;
• plugins and connected third-party services you choose to use;
• professional advisers, authorities, or a successor in a corporate transaction, subject to appropriate safeguards.

Some recipients may be outside Belgium, the EEA, the United Kingdom, or your country. Where required, we rely on an adequacy decision, the European Commission's Standard Contractual Clauses, the UK transfer addendum or other recognised safeguards, together with supplementary measures where appropriate. Contact us for information about applicable safeguards.

We do not sell personal data and do not share personal data for cross-context behavioural advertising. We do not use sensitive personal information to infer characteristics about you.

7. Retention and security

Your repository and local UsageX state remain on your device or workspace until you delete them, remove application data, or product retention limits overwrite them. For the ChatGPT app, queued relay requests normally expire after 10 minutes if not claimed. Claimed requests can remain while their outcome is resolved; terminal relay and task/run records become eligible for automated deletion after approximately 30 days. Active or recoverable records remain until they are safely completed or reconciled. Provider-side copies are retained according to your OpenAI/Codex account and data settings. ERGO CODE keeps account, billing, security, support, and pseudonymous usage records only as long as reasonably necessary for service delivery, security, measurement, legal claims, and Belgian tax and accounting duties.

Retention depends on the type of record, sensitivity, contractual need, legal requirements, and security risk. When data is no longer needed, we delete, aggregate, or irreversibly anonymise it. A valid deletion request may be subject to legal exceptions and technical backup cycles.

We use access controls, encryption in transit, credential separation, secret filtering, pseudonymisation, logging controls, and organisational safeguards appropriate to the risk. No system is completely secure; notify us promptly if you suspect unauthorised access.

8. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or receive a portable copy of personal data; object to processing; withdraw consent; opt out of certain sales, sharing, targeted advertising, or profiling; and appeal a refused request. You will not receive discriminatory treatment for exercising a privacy right.

Residents of the EEA, United Kingdom, Brazil, Canada, Australia, California, and other jurisdictions may exercise the rights granted by their local law. Because we do not sell personal data or share it for cross-context behavioural advertising, there is currently no sale/sharing opt-out process to activate. We will honour legally recognised browser-based opt-out signals where applicable.

Send a request to [email protected]. We may verify your identity and authority, and authorised agents may need to provide proof. We respond within the period required by applicable law.

You may complain to your local supervisory authority. In Belgium, the lead authority is the Belgian Data Protection Authority. We encourage you to contact us first so we can try to resolve the issue.

9. Other provisions

Automated processing

UsageX uses ChatGPT and Codex together: ChatGPT can prepare work from your repository and Codex can execute and test. It is not intended to make decisions about you that produce legal or similarly significant effects. You choose whether to use, accept, or deploy an output and should review it appropriately.

Children

UsageX is a professional service for people aged 18 or older. We do not knowingly collect personal data from children. Contact us if you believe a child submitted data.

Changes

We may update this policy as UsageX, our providers, or applicable law changes. We will post the revised date and provide additional notice when a material change requires it.