Privacy Policy
Effective Date: October 21, 2026 · Last Updated: October 2026
Octanon Labs, founded by Abrham Asbe, was built on an uncompromising principle: your source code is your private intellectual property. Cerin operates as a local-first desktop application. We do not store, view, or train artificial intelligence models on your private repository files.
1. Information We NEVER Collect
- Your Source Code: All code editing, indexing, AST parsing, and terminal executions occur 100% locally on your machine. Your project files never pass through Octanon Labs servers.
- Training Data: We never train, fine-tune, or calibrate public or private AI models on your code, prompts, or execution outputs.
- Your API Keys: API keys for OpenRouter, Anthropic, OpenAI, Gemini, or custom endpoints are stored strictly on your local computer using OS-level secure storage (Windows DPAPI, macOS Keychain, Linux Secret Service).
2. Information We Collect
We collect only the minimum information necessary to authenticate your account and ensure software updates:
- Account & Identity Data: When you sign in with GitHub via Supabase Auth, we store your GitHub user ID, public username, email address, avatar URL, and account plan tier (Free / Pro).
- Desktop Session Diagnostics: Minimal metadata when opening Cerin, including app version (e.g. 1.0.0), platform operating system (Windows, macOS, Linux), session start timestamp, and an anonymized IP hash.
- Aggregate Usage Telemetry: High-level operational events (such as session counts and model identifiers used) recorded in Supabase for your dashboard statistics.
3. How Your Information Is Used
We use the minimal data collected exclusively to:
- Authenticate your identity and link your desktop application to your dashboard profile.
- Deliver over-the-air updates and security patches for your operating system platform.
- Display your real personal session count and token statistics in your web dashboard.
- Maintain system integrity and prevent fraudulent abuse of release download channels.
4. Third-Party Services
Cerin integrates with the following trusted third-party providers:
- Supabase: For secure authentication and encrypted PostgreSQL database storage. Protected by Row Level Security (RLS).
- GitHub: For OAuth account verification and binary distribution via GitHub Releases CDN.
- Vercel: For global edge hosting of our web dashboard and site.
- AI Model Endpoints: When you generate code, prompts are transmitted directly from your workstation to your chosen model provider (e.g., OpenRouter, OpenAI, Anthropic, or Google) using your own credentials under their respective privacy policies.
5. Data Security & Storage
All web transmissions are encrypted using Transport Layer Security (TLS 1.3). Database tables in Supabase enforce strict Row Level Security (RLS) policies ensuring you alone can view your profile and session statistics.
6. Your Rights & Data Deletion
You have the right to inspect, export, or delete your account data at any time. To request complete deletion of your account and associated session rows, contact us at privacy@octanonlabs.com.
7. Contact Information
If you have questions or concerns about this Privacy Policy or our sovereign architecture, please contact:
Octanon Labs
Attn: Privacy & Security Team
Founder: Abrham Asbe
Email: privacy@octanonlabs.com