Privacy Policy for SDK Pilot

Last Updated: May 20, 2026

RBCA Global Pte. Ltd. ("we," "us," or "our") operates the SDK Pilot SaaS platform. We are committed to protecting the privacy and security of your enterprise data.

1. Information Collection And Use

We collect specific data to provide our Autonomous SDK Generation services securely:

• Personal Data: Account information used for authentication, billing, and direct support.
• API Specifications: We temporarily process your openapi.yaml or swagger.json to analyze your API structure and generate strict typings.
• GitHub Integration Data: When you authorize SDK Pilot via OAuth, we request minimal permissions needed to read OpenAPI specifications and write Pull Requests. We do not clone or store your proprietary application source code permanently on our servers.

2. Compiler Sandboxing Security

During the SDK generation process, SDK Pilot spawns an isolated sandbox environment to compile, verify, and execute generated SDK code. For TypeScript, a V8 sandbox (vm.runInNewContext) validates type safety via createProgram + getPreEmitDiagnostics and executes transpiled code with mocked dependencies. For Python, syntax validation (py_compile), import resolution, and module execution are performed. For Go, gofmt, go vet, and go build verify code correctness. All compilation data and intermediate states are strictly confined to ephemeral sandboxes and are destroyed immediately after a successful build.

3. Data Security

We use industry-standard encryption to protect data in transit. However, remember that no method of transmission over the Internet is 100% secure.

4. Contact Us

For security audits or privacy inquiries, contact our Data Protection Officer at: sdkpilot@rbcaglobal.com

← Back to SDK Pilot