Privacy Policy

At Python Online ("we", "us", or "our"), your privacy and the security of your code are our highest priorities. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and integrated development environment (the "Service").

1. Information We Collect

We collect information to provide, maintain, and improve our services. The types of data we collect depend on how you interact with Python Online.

A. Unauthenticated Users (Guest Mode)

If you use Python Online without creating an account, your code and project files are stored locally in your browser's memory (localStorage). When you execute a script, the code is temporarily transmitted to our secure, ephemeral Linux containers. Once the 60-second execution window completes, the container and its memory are instantly destroyed. We do not permanently store or review code executed by Guests.

B. Authenticated Users (Free & Pro Accounts)

When you register for an account, we collect the following:

• Account Information: Your name, email address, and authentication credentials. We use Supabase as our secure identity provider; we do not store raw passwords on our servers.
• User-Generated Content: To provide cloud persistence, we store your project files, scripts, uploaded data assets, and installed Python packages on our secure, federated file system.
• Execution Logs: For Pro users utilizing persistent workstations, we temporarily store standard output (stdout/stderr) logs to allow you to reconnect to long-running background tasks. These logs are strictly bound to your account and subject to a 5MB rolling quota.

C. Billing Information (Pro Accounts)

If you upgrade to a Pro account, your payment processing is handled entirely by our Merchant of Record, LemonSqueezy. We do not collect, process, or store your full credit card numbers or banking details. We only receive secure webhooks confirming your subscription status and billing periods to provision your hardware resources.

2. How We Use Your Information

We use the information we collect strictly to operate the Service:

• To provision and manage your isolated Linux execution environments.
• To synchronize your Virtual File System across your devices.
• To automatically allocate CPU and RAM resources based on your active workloads (Elastic Compute Pool).
• To host and route public internet traffic to your deployed web applications via Traefik.
• To respond to your Support Desk tickets and provide technical assistance.

We do not sell, rent, or lease your personal information or your proprietary code to third parties. We do not use your private code to train AI models.

3. Data Security & Architecture

Because Python Online executes arbitrary code, our architecture is designed with security at its core. We protect your data using strict isolation boundaries:

• Private Mesh Network: All communication between our central database and remote execution nodes occurs over a private, encrypted WireGuard VPN tunnel. Internal services (like Docker and NFS) are never exposed to the public internet.
• Container Isolation: Your code runs inside isolated Linux namespaces. Processes cannot break out of their container to access the host operating system or other users' data.
• Network Firewalls: Free tier outbound network requests are forced through a strict Zero-Trust proxy to prevent malicious activity, protecting the integrity of the cluster for all users.

4. Third-Party Service Providers

We employ trusted third-party companies to facilitate our Service. These parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose:

• Supabase: Authentication and PostgreSQL database hosting.
• LemonSqueezy: Payment processing and subscription management.
• Cloudflare: DNS routing, DDoS protection, and SSL certificate provisioning.

5. Data Portability and Deletion

We enforce a strict "No Lock-In" policy. You own your code.

• Exporting Data: You can download your entire workspace at any time. Simply right-click a project in the Explorer and select "Export Project" to receive a standard ZIP archive of your files.
• Account Deletion: If you wish to permanently delete your account, including all cloud-stored projects, databases, and scheduled tasks, you may submit a request through the Support Desk within the IDE dashboard. Upon verification, your data will be purged from our active federated storage.

6. Changes to this Privacy Policy

We may update our Privacy Policy from time to time to reflect architectural changes or new regulatory requirements. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.

7. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us by opening a Support Ticket inside the IDE, or by visiting our Contact Page.