Privacy Policy
This Privacy Policy describes how Command Code AI Provider (the "Plugin"), a WordPress plugin published on this website, handles data.
The short version
The Plugin has no servers of its own and never collects your data. It runs entirely on your own WordPress site. It reads the Command Code API key you configure and, only when something on your site asks the WordPress AI Client for a generation, sends that key together with your prompt to the Command Code API. We never see any of it.
What leaves your site
Only what you send to the AI: your prompts, and whatever the calling plugin or theme adds to them — system instructions, conversation history, tool definitions, a JSON schema for structured output, or files attached to the prompt. The Plugin contacts the following endpoints under https://api.commandcode.ai/provider/v1, operated by Command Code:
GET /models— called when the AI Client refreshes its list of available models, and when it checks whether your credentials work. No user content is sent; only your API key, so Command Code can return the models available to your account.POST /chat/completions— called whenever any plugin or theme on your site generates text with a non-Claude model. The request carries your API key and the prompt.POST /messages— the same as above, for Claude models, which Command Code serves only on this endpoint.
No request is made until something on your site asks the AI Client for a generation, or the AI Client refreshes its model list.
Your API key
The API key is stored on your own site — in the WordPress options table, or in an environment variable or PHP constant if you set one — and is only ever sent to api.commandcode.ai.
Zero data retention
Setting COMMANDCODE_ZDR=1 adds an x-cmd-zdr: 1 header, asking Command Code to route the request only through zero-data-retention upstreams. Requests fail with a 422 when the chosen model has no such upstream, rather than falling back silently.
Third-party service
Command Code is an external service operated by Command Code. Its own terms apply to the data it receives:
- Provider API documentation: https://commandcode.ai/docs/provider
- Terms of Service: https://commandcode.ai/terms
- Privacy Policy: https://commandcode.ai/privacy
- Zero data retention: https://commandcode.ai/docs/resources/zdr
Changes
This policy may be updated from time to time. The current version will always be available at this address.
Contact
See the Support page.