CodeXox Privacy Policy

2. Information We Collect

We collect data across three distinct categories:

• Account Information: Name, work email address, company affiliation, password hash, and OAuth authentication tokens (GitHub, Google).
• Billing & Transactional Data: Credit card brand, last 4 digits, billing address, and transaction IDs (processed securely by PCI-DSS Level 1 compliant processors such as Stripe). We do not store raw card numbers.
• Telemetry & Usage Data: IP addresses, browser agent, request latency, API token consumption counts, and diagnostic error logs for system reliability.

4. Legal Bases for Processing (GDPR Art. 6)

We only process personal data when an authorized legal basis exists under applicable data privacy frameworks:

• Contractual Necessity: To provide the software development platform, host your subdomains, and execute requested builds.
• Legitimate Interests: To detect malicious code, prevent denial-of-service attacks, and maintain platform security.
• Consent: For opt-in marketing newsletters, cookies, and non-essential analytics.

5. Data Retention & Erasure

Active project code and database backups are retained for the duration of your account subscription. Upon account deletion, all customer project repositories, staging URLs, and environment variables are permanently purged from primary storage within 30 days, and from automated cryptographic disaster-recovery backups within 90 days.

6. Sub-processors & Infrastructure Partners

To provide high-availability hosting and AI compute, we engage third-party sub-processors bound by strict Data Processing Agreements:

7. Your Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you have the following irrevocable rights:

• Right of Access: Request a full machine-readable export (JSON/CSV) of all personal data held.
• Right to Erasure ("Right to be Forgotten"): Request immediate account and code repository deletion.
• Right to Opt-Out (CCPA/CPRA): Opt-out of the sale or sharing of personal data (see our Do Not Sell My Info portal).
• Right to Non-Discrimination: Equal service and pricing regardless of privacy preference elections.

8. Cookies & Telemetry

We use strictly necessary cookies to maintain session states and CSRF token security. Optional analytical cookies are disabled by default until you grant explicit consent. You can customize cookie categories anytime on our dedicated Cookie Settings page.

9. Contact the Data Protection Officer

For privacy inquiries, GDPR data subject requests, or regulatory communications: