Privacy Policy
Last updated: January 1, 2026
1. Information we collect
R&DCredit AI collects source-code diffs (never full source), Jira and Linear ticket metadata, payroll records you authorize, and account information. We use CodeClaim to stream diffs only — your full repository contents are never replicated to our servers.
2. How we use evidence
Diff evidence and ticket metadata are processed by Agent 1 (4-Part Test qualification), Agent 2 (QRE calculation), and Agent 3 (Technical Narrative). Outputs are stored in your tenant and exported as the audit package. We do not use customer evidence to train shared models.
3. Sharing
We do not sell customer evidence or claim data. Evidence is shared with the named tax engineering reviewer assigned to your account, and with sub-processors that operate under DPAs (AWS for hosting, CodeClaim for diff ingestion, Microsoft RD-Agent for chronology).
4. Security
All evidence is encrypted in transit (TLS 1.3) and at rest (AES-256). SOC 2 Type II audit is available under NDA. Single-tenant deployment is available on Enterprise plans.
5. Retention
Audit packages are retained for 7 years to satisfy IRS recordkeeping requirements under §6001 and §41. Diff evidence can be purged earlier on written request, subject to legal-hold overrides.
6. Your rights
You may request export, correction, or deletion of your tenant data via privacy@rdcredit.ai. We respond within 30 days. California residents have additional rights under the CCPA.
7. Contact
Privacy questions: privacy@rdcredit.ai