Privacy Policy

Carbon Copy Markets Inc., doing business as Hoplite (“Hoplite,” “we,” “us,” or “our”), is the controller of the Personal Data described in this Policy. Our registered address is 2810 North Church Street, Wilmington, DE 19802, United States. You can reach our privacy team at support@hoplite.sh. We have not appointed a statutory data protection officer; the support team handles all data protection questions and requests.

We have not appointed a representative in the United Kingdom or the European Union.

This Policy explains how we collect, use, disclose, and protect information that identifies or can reasonably be linked to a person (“Personal Data”) when you visit hoplite.sh or use our applications, APIs, coding agents, sandboxes, integrations, support channels, and related services (collectively, the “Service”).

When you use Hoplite through an organization, that organization decides what repositories, prompts, and workspace data to bring into the Service and is usually the controller of Personal Data inside that content; Hoplite processes it as the organization's processor under our Terms of Service. Contact the organization about its privacy practices for that data. This Policy does not cover third-party services you connect to Hoplite or websites that link to us.

• Account and identity data (from you or your sign-in provider): name, email address, profile image, authentication identifiers, passkeys, organization membership, role, and preferences.
• Customer Content (from you, your organization, and connected services): source code, repository metadata, branches, commits, pull requests, issues, prompts, instructions, messages, files, model inputs and outputs, tool calls, terminal commands, environment configuration, and other content processed at your direction.
• Integration data (from services you connect): GitHub installation and repository information, issue-tracker records, Slack or iMessage messages, OAuth tokens, and integration configuration.
• Usage and technical data (collected automatically): IP address, browser and device information, dates and times, pages visited, feature usage, diagnostics, logs, crash data, performance metrics, agent events, security events, and approximate location derived from IP address.
• Signup verification data (collected automatically when you create an account): device signals and a derived device identifier from Fingerprint, a bot-risk score from Google reCAPTCHA, IP-derived country, and VPN or proxy indicators. See section 8.
• Billing data (from you and Stripe): plan, seat count, credit balance, transaction identifiers, billing status, billing address, and limited payment metadata. Stripe processes full payment-card details; Hoplite never stores complete card numbers.
• Communications (from you): support requests, feedback, survey responses, and records of the emails we send you.

UK and EU data protection law requires us to have a lawful basis for each way we use Personal Data. The table below sets out each purpose and the basis we rely on.

Where we rely on legitimate interests, we have balanced those interests against your rights and concluded that the processing is not overridden by them. You can ask us for a copy of that assessment or object to the processing at support@hoplite.sh.

Providing your name and email address is a contractual requirement: we cannot create or administer an account without them. Completing the signup verification check is also required to create an account, because it is how we keep the Service available to genuine users. Billing information is required only if you buy a paid plan or credits. Everything else, including product analytics and referral attribution, is optional, and declining it does not affect your use of the Service.

To perform agent requests, Hoplite sends prompts, instructions, code, files, repository context, tool results, outputs, and related metadata to the model provider selected or enabled for your workspace. The providers we use are listed in section 6. Hoplite does not use Customer Content to train or fine-tune machine-learning models.

Model providers process data under their business or API terms. Their retention practices vary by provider, model, account configuration, and law. Unless we expressly agree otherwise in writing, we do not represent that model-provider processing is subject to zero data retention. Free-plan workspaces use Meta's Muse Spark 1.3 Contributor route through OpenRouter for Muse Spark requests; Meta may use prompts and completions sent to that route to train and improve its models. Paid plans use the standard Muse Spark 1.3 route and are not sent to the Contributor route. See the Meta row in section 6. If your workspace connects its own model gateway or API key, requests go to that provider under your own agreement with them.

We share Personal Data with the service providers listed below, who process it on our behalf and only on our instructions. We do not sell Personal Data or share it for cross-context behavioral advertising. The tables are grouped by the purpose each provider serves and name the country the data is processed in together with the safeguard we rely on for the transfer (see section 7).

We also disclose Personal Data to: your organization and workspace collaborators according to their roles; services you direct us to connect; courts, regulators, and law enforcement where required by law or to protect rights and safety; and a successor in a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.

Hoplite is based in the United States and most of the providers in section 6 process data there. When we transfer Personal Data from the United Kingdom or the European Economic Area to the United States or another country without an adequacy decision, we rely on one of the following safeguards, as indicated per provider in section 6: the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (or the UK IDTA), the EU Standard Contractual Clauses for EEA transfers, or the provider's certification under the UK Extension to the EU-US Data Privacy Framework (the “UK-US Data Bridge”) where it holds one. [TO CONFIRM WITH COUNSEL: the mechanism in force for each provider, and Carbon Copy Markets Inc.'s own mechanism for receiving UK and EEA data as controller.]

You can request a copy of the relevant safeguards at support@hoplite.sh.

When you create an account, an automated check decides whether the signup can proceed. It uses a device identifier from Fingerprint, a bot-risk score from Google reCAPTCHA, the country and region derived from your IP address or device, VPN and proxy indicators, and the number of accounts previously created from the same device. The check refuses account creation when the signup appears automated, when the device has already created the maximum number of accounts, when the email domain is a disposable-email provider, or when the connection comes from a region we do not serve. Regions we do not serve are comprehensively sanctioned jurisdictions, jurisdictions our payment or model providers cannot serve, and regions with sustained signup fraud volume.

This is an automated decision that prevents you from using the Service. Because it may significantly affect you, you have the right to ask for a human review: email support@hoplite.sh with the email address you tried to sign up with, and a member of our team will review the decision, explain it where sanctions law permits, and create the account manually if the refusal was wrong. Beyond signup, Hoplite does not make decisions about you that have legal or similarly significant effects solely by automated means.

We use cookies and browser storage for two reasons: strictly necessary items that keep you signed in, protect sign-in, remember your choices, and verify signups; and analytics and attribution items. Where the law where you are requires consent (including the EEA, the United Kingdom, Switzerland, Brazil, Quebec, and South Korea), we set analytics and attribution items only after you choose Accept in the cookie banner, and Reject is offered with equal prominence. In the United States and other regions that require notice rather than consent, we set them when you visit and you can turn them off at any time with the “Your privacy choices” link next to “Privacy policy” in the page footer (our “Do Not Sell or Share My Personal Information” control), which offers the same Accept and Reject choice; we also treat a Global Privacy Control signal from your browser as that opt-out. We use your country (never stored) only to decide which of these applies. You can change your choice at any time through those controls or by clearing your browser storage; withdrawing consent or opting out stops further analytics and attribution storage but does not affect processing that already happened.

Browser settings also let you block or delete cookies, but blocking strictly necessary cookies prevents sign-in from working.

Deletion from live systems and from backups happens on different schedules, and copies may persist in backups until those are overwritten, normally within [35 — TO CONFIRM] days. We may keep data longer where the law requires it, to resolve disputes, or to enforce our agreements.

If you are in the United Kingdom or the European Economic Area, you have the following rights over your Personal Data:

• Access: to obtain confirmation that we process your Personal Data and a copy of it.
• Rectification: to have inaccurate Personal Data corrected and incomplete data completed.
• Erasure: to have Personal Data deleted where there is no longer a good reason for us to keep it.
• Restriction: to have us pause processing while a dispute about accuracy or lawfulness is resolved.
• Portability: to receive the Personal Data you gave us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
• Objection: to object to processing based on legitimate interests, including product analytics and product announcements, and to any direct marketing.
• Withdrawal of consent: where we rely on consent (analytics and attribution cookies), to withdraw it at any time. Withdrawal does not affect processing that took place before you withdrew.
• Not to be subject to a solely automated decision with legal or similarly significant effects: see section 8 for the human-review route.

To exercise any right, email support@hoplite.sh. We may ask you to verify your identity. We respond within one month, extendable by two further months for complex requests, and we will tell you if we need the extra time. We do not charge for requests unless they are manifestly unfounded or excessive. We will not treat you differently for exercising your rights.

You also have the right to lodge a complaint with a supervisory authority. In the United Kingdom, that is the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; ico.org.uk; 0303 123 1113. In the European Economic Area, you can complain to the data protection authority of the country where you live, work, or where you believe the infringement occurred. We would appreciate the chance to address your concern first, so please consider contacting us before you complain.

If you live elsewhere, including in a U.S. state with a privacy law, you may have similar rights, including to appeal a denied request. Use the same contact address. Authorized agents may submit requests where local law permits.

We protect Personal Data with access controls, encryption in transit, encryption at rest for secrets and integration tokens, credential protections, logging, and isolated sandboxes for agent execution. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for securing your account, connected services, secrets, repositories, and local systems.

The Service is not directed to children, and you must be at least 18 years old to use it. We do not knowingly collect Personal Data from children. If you believe a child has provided Personal Data, contact us so we can investigate and delete it.

We may update this Policy as the Service and our practices change. We post each version with its effective date and keep earlier versions available on request. If a change materially affects how we use Personal Data, we will notify you by email or in the Service before it takes effect. Continuing to use the Service after that notice means the new version applies; you are not required to re-accept it to keep using an existing account.

For privacy questions or requests, email support@hoplite.sh, or write to Carbon Copy Markets Inc., 2810 North Church Street, Wilmington, DE 19802, United States.