Privacy Policy

1. Information We Collect

Account Information: Name, email address, and company name when you register or contact us.

Project Data: Files, messages, and deliverables exchanged during project collaboration.

Payment Information: Processed securely through Stripe. We never store credit card numbers on our servers.

Usage Data: Anonymous analytics including page views, referral source, and browser type to improve our service.

2. How We Use Your Information

To provide and maintain our development services.

To communicate project updates, invoices, and important notifications.

To process payments through our payment provider (Stripe).

To improve our website and services based on usage patterns.

To respond to inquiries and support requests.

3. Data Security

All data is encrypted in transit using TLS/SSL.

Database access is protected by Row-Level Security (RLS) policies ensuring users can only access their own data.

Authentication is handled by Supabase Auth with industry-standard security practices.

Payment processing is PCI-DSS compliant through Stripe.

File uploads are validated for type and size, and stored securely.

4. Third-Party Services

We use the following third-party services that may process your data:

Supabase: Database hosting and authentication.

Stripe: Payment processing (PCI-DSS Level 1 certified).

Resend: Transactional email delivery.

5. Data Retention

We retain project data for the duration of our business relationship plus 2 years for legal compliance. You may request deletion of your data at any time by contacting us.

6. Your Rights

Access: Request a copy of all personal data we hold about you.

Correction: Request correction of inaccurate data.

Deletion: Request deletion of your personal data.

Portability: Request your data in a machine-readable format.

Objection: Object to processing of your data for marketing purposes.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies. Analytics data is collected anonymously and does not identify individual users.

8. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy periodically. Changes will be posted on this page with an updated revision date. We will notify you of material changes via email.

10. Contact

For privacy-related questions or to exercise your rights, contact us at hello@kodessium.com.