Privacy Policy

Last updated: March 12, 2026

Overview

Viagen is an open-source Vite dev server plugin that connects your local development environment to Claude Code. This privacy policy describes how data is handled when using viagen, including the Vercel Sandbox integration.

What viagen does

Viagen runs as a Vite plugin inside your dev server. It provides a chat interface that sends your messages to Claude Code (via the Anthropic API) and applies code changes to your project. When deployed to a Vercel Sandbox, viagen runs your dev server in an isolated, ephemeral virtual machine.

Data we collect

Viagen itself does not collect, store, or transmit any personal data or telemetry. The plugin runs entirely within your local machine or your Vercel Sandbox instance.

Data processed during use

When you use viagen, the following data is processed in the course of normal operation:

Vercel Sandbox integration

When you deploy to a Vercel Sandbox, your project code is transmitted to Vercel's infrastructure to run in an isolated environment. Sandbox instances are ephemeral and are automatically destroyed after the configured timeout. Data processed within a sandbox is subject to Vercel's Privacy Policy.

Third-party services

Viagen integrates with the following third-party services:

Data storage

Viagen stores configuration data (API keys, OAuth tokens) exclusively in your project's local .env file. A .viagen/ directory is created in your project root to store dev server logs and plugin configuration.

Session records

The viagen platform maintains session records for authenticated users. These records are used solely for login functionality and access control within platform teams. Session data is never used for analytics, advertising, profiling, or any purpose beyond authentication and team-based access management. Your email address is never shared with or sold to any third party.

Analytics

We collect anonymized, aggregate usage data to improve the viagen platform. This data is processed by our own first-party analytics systems — we do not use third-party analytics services. Usage data is never linked to your email address or personal identity.

Sandbox authentication

Sandbox instances are protected by a randomly generated authentication token. Access requires this token, which is provided as a URL parameter on first visit and stored as an HTTP-only session cookie. Unauthenticated requests to sandbox endpoints receive a 401 response.

Open source

Viagen is open-source software licensed under the MIT License. You can review the complete source code at github.com/viagen-dev/viagen to verify these privacy practices.

Contact

For questions about this privacy policy, please open an issue on the GitHub repository.