Privacy Policy

We collect information you provide directly to us when using our website or engaging our Services:

• Contact information: name, email address, phone number, company name
• Project details: project descriptions, business requirements, and specifications shared during consultations
• Account data: login credentials if you access a client portal or project dashboard
• Payment information: billing address and payment details processed securely through Stripe (we do not store credit card numbers on our servers)
• Communications: messages, emails, and feedback you send us

When you visit our website, we automatically collect certain technical information:

• Device information: browser type, operating system, device type, and screen resolution
• Usage data: pages visited, time spent on pages, click patterns, and navigation paths
• Network data: IP address, approximate geographic location, and referring URL
• Cookies and similar technologies: session identifiers, preferences, and analytics tokens

We use the information we collect for the following purposes:

• To provide, maintain, and improve our Services
• To communicate with you about projects, updates, and support
• To process payments and send invoices
• To send marketing communications (only with your consent; you can opt out at any time)
• To analyze website usage and improve the user experience
• To detect, prevent, and address technical issues or fraud
• To comply with legal obligations

We use cookies and similar tracking technologies on our website:

• Essential cookies: required for the website to function properly (session management, security)
• Analytics cookies: help us understand how visitors use our site (page views, traffic sources). We use privacy-friendly analytics tools
• Preference cookies: remember your settings and choices for a better experience

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. We do not use cookies for cross-site advertising tracking.

Your data is stored securely using industry-standard practices:

• Client project data and account information are stored in Supabase, which provides encrypted storage, row-level security, and SOC 2 Type II compliance
• Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified payment processor. We never store full credit card numbers on our servers
• All data transmitted between your browser and our servers is encrypted via TLS/SSL
• We implement access controls, regular security audits, and encrypted backups

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

We use the following third-party services that may process your data:

• Stripe: payment processing (see Stripe's privacy policy at stripe.com/privacy)
• Supabase: database and authentication services
• Vercel: website hosting and deployment
• Analytics provider: website usage analytics
• Email service: transactional and marketing emails

Each third-party service has its own privacy policy governing the use of your information. We only share the minimum data necessary for each service to function.

We retain your information for as long as necessary to provide our Services and fulfill the purposes outlined in this policy:

• Active client data: retained for the duration of the business relationship and 3 years after project completion
• Payment records: retained for 7 years as required by tax and accounting regulations
• Website analytics data: retained for 26 months in anonymized/aggregated form
• Marketing contacts: retained until you unsubscribe or request deletion
• Communication records: retained for 2 years after last interaction

Upon request, we will delete your personal data within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to correction: request correction of inaccurate or incomplete data
• Right to deletion: request deletion of your personal data ("right to be forgotten")
• Right to portability: receive your data in a structured, machine-readable format
• Right to opt out: opt out of the sale or sharing of your personal data (we do not sell personal data)
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights

California residents: Under the CCPA, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information.

EU/EEA residents: Under the GDPR, you have additional rights including the right to restrict processing and the right to object to processing. Our legal basis for processing is contract performance and legitimate interest.

To exercise any of these rights, contact us at hello@codelaunch.dev. We will respond within 30 days.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. If we make material changes, we will notify active clients via email.

Your continued use of our website or Services after changes are posted constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: hello@codelaunch.dev
• Address: 55 West 14th Street, Suite 101, Helena, Montana, 59601
• Company: Southern Digital Technologies LLC