Privacy Policy

1. Introduction

Codcel ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and safeguard personal information when you use our website, desktop applications, and related services. We comply with the EU General Data Protection Regulation (GDPR), UK GDPR, and other applicable privacy laws.

1A. Language and Translation Disclaimer

Codcel may provide this Privacy Policy and related privacy notices in languages other than English for convenience. These translations may be generated or assisted by automated tools.

In the event of any inconsistency, conflict, or ambiguity between a translated version and the English version, the English version shall prevail and is the only legally binding version.

By using Codcel, you acknowledge and agree that all legal interpretation of this Privacy Policy is governed exclusively by the English-language version.

2. Data We Collect

We only collect the minimum data required to provide our services:

• Account information: such as your email address, used for login and account identification.
• Authentication data: magic-link login tokens used to securely sign you in. These are short-lived and stored temporarily.
• Billing information: When you purchase a plan, our payment provider Paddle (Merchant of Record) collects your billing details such as name, email, address, country, tax information, and payment method. We do not store full payment card details.
• Technical logs: Our hosting providers (such as Vercel and Fly.io) automatically generate basic server logs that may include IP address, browser type, and timestamp. These logs are used solely for security, performance monitoring, and preventing abuse. We do not run analytics, tracking cookies, or marketing scripts.
• Support messages: When you contact us for support or feedback, we receive the information you choose to send.

3. How We Use Your Data

We use your data to:

• Provide and maintain the Codcel service.
• Authenticate your login via magic-link email.
• Process payments and manage subscriptions through Paddle.
• Ensure security, monitor performance, and prevent fraud.
• Respond to support requests and improve the platform.

4. Legal Basis (GDPR)

We process personal data under the following legal bases:

• Contractual necessity: to provide the Codcel service, authenticate users, and process subscriptions.
• Legitimate interest: maintaining a secure platform, preventing abuse, ensuring proper functioning of our infrastructure, and improving our product.

5. Sharing & Third Parties

We do not sell or rent your personal data. We only share information with trusted service providers that help us operate Codcel:

• Paddle – our payment and subscription provider. Paddle acts as the Merchant of Record and processes billing details, payment methods, receipts, tax compliance, and fraud prevention. Paddle may collect additional financial information required by law.
  You can view Paddle's Privacy Policy on their website.
• Hosting providers (Vercel, Fly.io) – which process minimal technical request data (such as IP address and timestamps) to deliver our website and API securely.
• Email provider – used only to send magic-link login emails and essential transactional messages.

6. International Transfers

Some of our service providers may process data outside the EU/EEA. When this occurs, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent protections.

7. Data Retention

We retain personal data only as long as necessary to provide our service or as required by law. You may request deletion of your account and personal data at any time.

8. Your Rights (GDPR)

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data.
• Request a copy of your data (data portability).
• Object to or restrict certain types of processing.

To exercise your rights, contact us at:
privacy@codcel.io

9. Children's Privacy

Codcel is not intended for children under the age of 16. We do not knowingly collect personal data from minors.

10. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect improvements, regulatory changes, or new features. The updated version will always be posted on this page.

11. Contact

If you have any questions about this Privacy Policy, you can contact us at:
privacy@codcel.io