CodePreflight is a professional legacy code transpilation and analysis service operated by Nigel Ffooks, trading as CodePreflight, based in Midhurst, West Sussex, United Kingdom.

For all data protection enquiries, contact us at: hello@codepreflight.com

We are in the process of registering with the Information Commissioner's Office (ICO) as required under UK GDPR. Our registration will be completed prior to commercial launch. We have conducted, and will continue to conduct, appropriate risk assessments for our processing activities, including any Data Protection Impact Assessments required under UK GDPR.

This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. It applies to all users of the CodePreflight platform at codepreflight.com.

This policy should be read alongside our Terms and Conditions, in particular clauses 13 (Confidentiality) and 21 (Data Protection).

We collect the minimum data necessary to provide the service. This falls into two categories:

Account and billing data — collected at registration and subscription:

• Name and email address
• Organisation name (if provided)
• Subscription tier and billing history (managed by our payment processor)
• Login credentials (stored in encrypted form — we never see your password in plain text)

Usage data — collected when you use the transpilation service:

• File name and size of uploaded source files
• Source language selected
• Number of lines processed
• Date and time of each run
• Technical logs (errors, processing status) for service stability

We do not collect the contents of your source code files beyond what is necessary for in-memory processing (see section 4). We do not collect browsing behaviour beyond standard server logs, or any data about your end-users.

We do not intentionally process special category data (such as health, ethnic origin, or other sensitive personal data as defined under UK GDPR). Legacy source code may occasionally contain such data in comments or embedded strings. If it does, it is handled and transmitted in exactly the same way as all other submitted content — processed in memory, not stored, and discarded on completion. Users should avoid submitting source files that contain special category personal data wherever possible.

When you submit a file for transpilation, the following occurs:

• Your file is received in memory — it is never written to disk on our servers
• The file content is passed to our infrastructure partners for AI processing (see section 5)
• The processed output is returned, packaged into a ZIP, and delivered to your browser
• All in-memory data relating to your file is cleared on completion

We treat your source code as commercially sensitive. Our infrastructure partners are contractually prohibited from using your submitted content to train AI models. See section 5 for further detail.

To deliver the transpilation service, we work with carefully selected infrastructure partners. These partners provide the AI processing and hosting infrastructure that powers CodePreflight.

Our infrastructure partners operate in the UK, EU, and United States. Where data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses where required.

Key contractual commitments from our infrastructure partners:

• Your submitted source code is not used to train AI models
• Content submitted via the API is not retained beyond the duration of each processing request
• Security and confidentiality obligations are contractually binding

We do not name our infrastructure partners publicly in order to protect our operational security. This is consistent with standard commercial practice. We will confirm the processing jurisdictions (UK, EU, United States) on request.

We use your personal data only for the following purposes:

• To create and manage your account
• To process your subscription and billing (via our payment processor)
• To deliver the transpilation service
• To track your line usage against your subscription tier
• To communicate with you about your account, service updates, or significant changes to our terms
• To investigate and resolve technical issues or support requests
• To comply with our legal obligations

We do not use your data for marketing to third parties, profiling, or any purpose beyond delivering this service. We do not send promotional emails unless you have explicitly opted in to receive them. All communications from us are transactional — relating to your account, your subscription, or material changes to the service.

Under UK GDPR, we process your personal data on the following legal bases:

• Contract performance — processing necessary to deliver the service you have subscribed to
• Legitimate interests — maintaining service security, preventing fraud, and ensuring service integrity. We have assessed that these legitimate interests do not override your fundamental rights and freedoms, given the limited nature of the data involved and the reasonable expectations of business users of a professional service
• Legal obligation — where we are required to process data to comply with applicable law

We retain personal data only for as long as necessary:

• Account data is retained for the duration of your subscription plus six years (in accordance with UK financial record-keeping requirements)
• Technical logs are retained for a maximum of 90 days
• Source code submitted for processing is not retained at all — it is processed in memory and discarded immediately upon delivery of your output

When you cancel your subscription, your account data is marked for deletion and purged at the end of the applicable retention period.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may ask us to correct inaccurate data
• Right to erasure — you may ask us to delete your data, subject to our legal retention obligations
• Right to restriction — you may ask us to restrict processing in certain circumstances
• Right to portability — you may request your data in a machine-readable format
• Right to object — you may object to processing based on legitimate interests

To exercise any of these rights, contact us at hello@codepreflight.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.

CodePreflight uses only strictly necessary session cookies to maintain your login state. We do not use advertising cookies, tracking pixels, or third-party analytics services.

No consent banner is required for strictly necessary cookies under UK GDPR and PECR. If our cookie use changes, we will update this policy and notify registered users.

We take the security of your data seriously. Our technical and organisational measures include:

• All data in transit is encrypted using TLS
• Passwords are stored using industry-standard hashing — we never store passwords in plain text
• Uploaded source files are never written to disk — processed in memory only
• Access to account data is restricted to authorised personnel only

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected users without undue delay, as required by UK GDPR.

We may update this Privacy Policy from time to time. Where changes are material, we will notify registered users by email at least 14 days before the changes take effect. Continued use of the service after that date constitutes acceptance of the revised policy.

The current version number and effective date are always shown at the top of this page.

For any questions about this Privacy Policy or how we handle your data: