Privacy Policy
Controller: Fuzzy Nova Product: FlightPath VS Code extension and companion CLI / MCP server binaries Effective Date: [DATE] Version: 1.0
1. Scope
This Privacy Policy explains how Fuzzy Nova collects, uses, discloses, and protects information when you use the FlightPath VS Code extension and companion binaries (the Software), visit flightpath.dev, or contact us for support, sales, billing, or security matters.
This Privacy Policy does not cover third-party AI services, tools, or platforms that you connect to through the Software, including GitHub Copilot, Claude, Codex, Gemini, or others. Those services are governed by their own privacy policies and terms.
2. What We Do Not Collect
The Software is designed to run locally on your machine. We do not intentionally collect or transmit to us:
- prompt text or workflow content
- source code or file contents
- file paths or workspace/repository names
- AI model output or response text
- session IDs, run IDs, or workflow identifiers
- agent names, skill names, MCP server IDs, or end-condition script names
- any other user-generated string content
3. Information We Collect
3.1 Usage telemetry
We collect limited operational telemetry to understand how the Software is used, improve the product, and troubleshoot problems. Telemetry is sent through Microsoft’s @vscode/extension-telemetry library and respects the VS Code telemetry.telemetryLevel setting. If telemetry is disabled in VS Code, the Software does not send telemetry to us through that library.
Telemetry may include:
- harness identifier or execution mode
- counts and durations
- boolean feature flags
- outcome and error type names
- extension version
- VS Code version
- operating system platform
- a VS Code machine identifier generated by the telemetry library
We use this information for product analytics, reliability, debugging, and feature planning. Telemetry is processed through Microsoft Azure Application Insights.
Important: We do not use telemetry to collect prompts, code, file paths, or other content from your editor or workspace.
3.2 License and activation data
If you purchase or activate a Pro License, we collect and process the minimum information needed to issue, validate, and support that license, including:
- license key or signed license file information
- license status
- machine fingerprint or identifier
- IP address used during online activation, refresh, or deactivation
License verification is provided through Keygen. If you use the offline signed-license file path, activation can be verified locally on your machine without sending activation data to us or Keygen.
3.3 Purchase and billing data
Purchases are processed by our merchant of record, Lemon Squeezy. Depending on your purchase and location, Lemon Squeezy may collect and process your name, email address, billing country, and payment details under its own privacy policy and terms.
We receive order metadata such as your email address, product information, order ID, and license-related purchase records so we can issue and support your license. We do not receive or store full payment card numbers.
3.4 Support and communications
If you contact us by email at privacy@flightpath.dev, support@flightpath.dev, billing@flightpath.dev, security@flightpath.dev, sales@flightpath.dev, or hello@fuzzno.com, we receive your email address and the contents of your message.
Email is hosted on Google Workspace. Public bug reports or discussions on GitHub are governed by GitHub’s privacy policy and are visible to others.
3.5 Website data
Our website, flightpath.dev, is hosted on Netlify. Netlify may process standard server and security logs, including IP addresses and request metadata, to operate and secure the site.
4. How We Use Information
We use the information we collect to:
- provide, activate, and verify Pro Licenses
- process purchases and issue receipts
- deliver support, billing, security, and sales communications
- understand aggregate usage and improve the Software
- detect and prevent fraud, abuse, and license violations
- comply with legal obligations
We do not sell personal data, and we do not use personal data for third-party advertising.
5. Legal Bases for Processing
Where applicable law requires a legal basis for processing, we rely on one or more of the following:
- Performance of a contract — to provide the Software, activate licenses, and fulfill purchases
- Legitimate interests — to secure and improve the Software, prevent abuse, and respond to support requests
- Legal obligation — to maintain records and comply with tax, accounting, or other legal requirements
- Consent — where required for certain telemetry or similar processing, and as reflected by your settings or choices
6. Sharing and Sub-Processors
We use trusted vendors to help operate FlightPath. These providers process data on our behalf or as independent providers under their own terms, as applicable:
| Sub-processor | Purpose | Data categories |
|---|---|---|
| Microsoft Azure Application Insights | Telemetry processing | Telemetry events, machine/version/OS metadata |
| Keygen | License issuance and verification | License key, license status, machine identifier, IP address during online activation |
| Lemon Squeezy | Payments and merchant of record | Name, email address, billing country, payment metadata |
| Netlify | Website and infrastructure hosting | Server logs, IP addresses, request metadata |
| Google Workspace | Business and support email | Email addresses and message content |
We may also disclose information:
- to comply with legal obligations;
- to respond to lawful requests and legal process;
- to protect our rights, users, and the security of the Software;
- in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate protections.
7. Telemetry Choices
You can disable telemetry by setting telemetry.telemetryLevel to off in VS Code. If telemetry is disabled, the Software will not send telemetry through the VS Code telemetry library.
You may also limit the information we receive by using the Free Tier or by avoiding Pro activation, if that fits your use case.
8. Data Retention
We retain information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.
Typical retention periods include:
- Telemetry: retained according to Azure Application Insights settings, currently approximately 90 days
- License and activation records: retained for the life of the license and as needed to support enforcement, fraud prevention, and customer support
- Purchase records: retained by us and our payment provider as required for tax, accounting, and legal obligations
- Support email: retained as needed to resolve inquiries and maintain records of correspondence
Retention periods used by our vendors may differ from our own and may be subject to their policies and configurations.
9. International Transfers
We and our vendors may process information in the United States and other countries that may not have the same data protection laws as your jurisdiction.
Where required by law, cross-border transfers rely on appropriate safeguards such as Standard Contractual Clauses or comparable legal mechanisms. Additional region-specific transfer terms may apply where required.
10. Your Rights and Choices
Depending on where you live, you may have rights to:
- access your personal data
- correct inaccurate data
- delete personal data
- object to or restrict certain processing
- withdraw consent where processing is based on consent
- receive a copy of certain data in a portable format
To exercise these rights, contact us at privacy@flightpath.dev. We may need to verify your identity before acting on your request.
Because some information is held by our vendors, we may need to coordinate with them to fulfill your request.
California notice
We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are used under the California Consumer Privacy Act, as amended by the CPRA.
11. Children
FlightPath is a professional developer tool and is not directed to children. We do not knowingly collect personal data from children under the age of thirteen (13). If you believe a child has provided us personal data, please contact us at privacy@flightpath.dev.
12. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and may provide additional notice on flightpath.dev or within the Software.
14. Contact
Privacy inquiries: privacy@flightpath.dev
Business operator: Fuzzy Nova — hello@fuzzno.com