Privacy Policy

How ArcBox collects, uses, shares, and protects information when you use the LinkCode websites, applications, and cloud services.

Last updated:

LinkCode is a product of ArcBox, Inc. d/b/a ArcBox Labs ("ArcBox", "Company", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the LinkCode websites at linkcode.ai and its subdomains, the LinkCode applications, and LinkCode cloud services (together, the "Service").

By using the Service, you agree to this Privacy Policy and our Terms of Service. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide

We may collect information you choose to provide, such as your name, email address, company, support requests, feedback, issue reports, or other information you send to us.

Account information

LinkCode uses the ArcBox account service, a central sign-in service we operate for ArcBox products. When you create or sign in to an account, we receive and store profile information such as your name, email address, and avatar image.

Devices and usage metering

When you connect a LinkCode installation to your account, we register it as a device with information such as its platform, a device public key, how that key is protected, an advisory hardware identifier, and the client version. While your devices use the relay, we record traffic metadata — such as bytes sent and received and message counts, aggregated per device and per hour — to operate, secure, and bill for the Service.

Content you transmit, store, or share through the Service

The Service lets your devices work together and, as features become available, store and share your work. Content you transmit, store, or share through the Service — for example, sessions relayed between your registered devices so a mobile client can reach a host on another network, or agent conversations and related content you choose to store, sync, or share where the Service offers those features — is processed on servers we operate to provide those features. Relay traffic is encrypted in transit between your devices and our servers. Content relayed between your devices without being stored is not retained after delivery. Content you store or sync is retained as described in Section 6, and people you share content with can view it.

Local data in the LinkCode applications

LinkCode runs your coding agents on your own devices. Your projects, code, terminal sessions, and the provider credentials you configure are stored locally, and we do not intentionally collect the contents of your repositories or local files.

When you use a coding agent or AI model with your own account or API key, prompts, code, and other content you exchange with it flow directly from your device to that provider, subject to the provider's own terms and privacy policy.

Diagnostics and usage information

Official builds of the LinkCode applications use Sentry to collect crash reports, error diagnostics, and performance traces, and our websites may use Sentry for the same purpose. Reports may include stack traces, device and operating system information, app version, and diagnostic metadata. Crash and error reporting is active in official builds and is not intended to include the contents of your projects or conversations. We may also collect information about how the Service and the applications are used — such as feature usage and performance events, tied to your account or an internally generated identifier — to understand and improve product quality.

Websites, APIs, and software distribution

When you visit the Service, call our APIs, or download or update the LinkCode applications, we and our network and content delivery providers automatically log standard connection information, such as your IP address, browser or client type and version, the pages or files requested, referring URL, approximate location derived from IP address, and dates and times of access.

Documentation assistant

If you ask questions through the documentation assistant on our websites, your questions and the surrounding conversation are processed by an AI model provider on our behalf to generate answers.

Cloud compute

Where LinkCode offers cloud compute or sandbox features, your workloads run on infrastructure that ArcBox operates. We log connection and traffic metadata — such as IP addresses, ports, traffic volumes, and timestamps — to operate the network and to support security, capacity planning, billing, and abuse prevention. This logging concerns network metadata; it is not intended to capture the contents of your communications or workloads.

2. How We Use Information

We use information to:

  • operate, maintain, secure, and improve the Service;
  • authenticate you, register and manage your devices, deliver relayed sessions between them, and store, sync, and share sessions you choose to keep with the Service;
  • provide documentation, downloads, support, updates, and related communications;
  • measure usage and calculate fees where the Service is paid;
  • respond to questions, feedback, bug reports, and support requests;
  • analyze usage, performance, reliability, and feature quality, diagnose errors and crashes, and develop new features and services;
  • detect, prevent, and respond to fraud, abuse, security incidents, and technical issues;
  • comply with legal obligations and enforce our Terms of Service; and
  • send administrative notices, including updates to this Privacy Policy.

ArcBox, Inc. is the controller of personal information processed in connection with the Service. Where the EU or UK General Data Protection Regulation applies, we process personal information on the following legal bases:

  • Performance of a contract — providing the Service you request, including accounts, device registration, the relay, downloads, and support;
  • Legitimate interests — operating, securing, and improving the Service, measuring usage, preventing abuse, and diagnosing errors and crashes;
  • Consent — where we request it, such as for marketing communications; you may withdraw consent at any time without affecting prior processing;
  • Legal obligations — complying with applicable law and establishing or defending legal claims.

4. How We Share Information

We do not sell your personal information for money or rent it to third parties for their own marketing. We may share information in the following limited circumstances:

  • Service providers. We may share information with vendors that help us host, secure, monitor, and support the Service, including Cloudflare, Inc. (network, hosting, and content delivery), Functional Software, Inc. d/b/a Sentry (error monitoring and crash reporting), and AI model providers that power AI features we operate, such as the documentation assistant. These vendors process information on our behalf and under our instructions.
  • Third parties you direct us to work with. The coding agents and AI models you configure in LinkCode receive the content you exchange with them directly from your device; they act on their own terms, not on our behalf.
  • Legal and safety reasons. We may disclose information when we believe disclosure is reasonably necessary to comply with law, legal process, enforceable government request, or to protect rights, safety, and security.
  • Business transfers. If ArcBox is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.
  • With your direction or consent. We may share information when you ask us to or otherwise consent.

We may use or disclose aggregated or de-identified information that does not reasonably identify you.

5. Cookies

No analytics or advertising cookies today

The LinkCode websites can be browsed without an account and do not currently use analytics or advertising cookies.

When you sign in, we set strictly necessary cookies on the linkcode.ai domain to keep you signed in and to secure your session, and our network and content delivery providers may set cookies needed to protect the Service from bots and abusive traffic. If we introduce analytics cookies in the future, we will update this policy and, where required by law, ask for your consent first. You can delete or block cookies through your browser settings; blocking strictly necessary cookies may prevent parts of the Service, including signing in, from working.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected. When setting a retention period for a category of data, we consider why we collected it, how sensitive it is, and our operational and legal needs. We retain information longer where necessary to comply with legal obligations, resolve disputes, enforce agreements, or collect fees owed, and we may retain aggregated or de-identified information that does not reasonably identify you. For example:

  • we retain your account profile for as long as your account is active;
  • we retain device registrations and usage metering records, including records of revoked devices, for as long as needed for billing integrity, accounting, and audit purposes;
  • we retain sessions you store or sync with the Service until you delete them or close your account, except for residual copies in backups;
  • we retain support requests and related correspondence for as long as needed to resolve the matter; and
  • we retain connection, log, and diagnostic data for as long as we need it to keep our systems working appropriately, effectively, and securely.

Content you relay between your devices without storing it with the Service is not retained after delivery. Where LinkCode offers cloud compute features, content you run or store on them is your content: we process it only to provide the service you requested, and it is deleted when you delete it or terminate the resources that contain it. Where such content includes personal information about your own users, ArcBox processes that information on your behalf as a processor; you are the controller, and requests concerning such information should be directed to you.

7. How We Protect Information

We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

ArcBox is based in the United States, and the Service is operated from the United States. Information we collect is transferred to, stored, and processed in the United States and in other countries where our service providers operate, which may have data protection laws different from those of your jurisdiction. Where the GDPR or UK GDPR applies to a transfer, we rely on appropriate safeguards, such as standard contractual clauses or our service providers' certifications under the EU-U.S. Data Privacy Framework.

9. Your Choices and Rights

You may opt out of marketing emails by following unsubscribe instructions in those emails. We may still send administrative or service-related messages. You can revoke registered devices from your account and delete or block cookies through your browser.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection regarding personal information. To make a request, contact us at legal@arcbox.dev. We may need to verify your request before acting on it.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you may also withdraw consent at any time without affecting the lawfulness of prior processing, and you may lodge a complaint with your local data protection supervisory authority.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at legal@arcbox.dev and we will take appropriate steps to delete it.

The Service may link to third-party websites, repositories, package registries, or services. This Privacy Policy applies only to information collected by ArcBox. We are not responsible for third-party privacy practices, content, or security.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by posting a notice on the Service or by other appropriate means. Your continued use of the Service after an update means you accept the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or LinkCode privacy practices, contact us at:

ArcBox, Inc. d/b/a ArcBox Labs
131 Continental Dr, Suite 305
Newark, Delaware 19713
legal@arcbox.dev