Who We Are & Scope

CodeAlign provides software development and related services. This Policy covers visitors to our website, prospects and clients who communicate with us, and personal data we process as a service provider on behalf of clients.

Information We Collect

• Contact data: name, email, phone, company, and role.
• Business and project info: requirements, timelines, budgets, feedback, and uploaded files.
• Account/portal data (if applicable): login credentials and access roles.
• Usage data: pages viewed, links clicked, referral pages, timestamps, approximate location (from IP), device/browser type, language settings.
• Cookies and similar technologies for analytics, performance, and preferences.
• Support and communications: messages, meeting notes, and recordings where disclosed.

How We Use Information

• Respond to inquiries, provide quotes, and deliver services.
• Operate, secure, and improve our website and offerings.
• Personalize content and measure engagement.
• Send service messages and, where required, marketing with consent.
• Comply with legal obligations and enforce agreements.

Legal Bases (where applicable)

• Contract performance for requested services.
• Legitimate interests (e.g., site security, business development) balanced with your rights.
• Consent where required (e.g., certain cookies/marketing).
• Compliance with legal obligations.

Sharing & Disclosure

• Service providers and processors (hosting, analytics, communications, CRM, payments, project tools) under appropriate agreements.
• Business partners and subcontractors to help deliver services under confidentiality and data protection terms.
• Legal/compliance when required by law or to protect rights and safety.
• Business transfers (e.g., merger or acquisition) with appropriate safeguards.

We do not sell or “share” personal information for cross-context behavioral advertising.

Data Retention

We retain personal information only as long as necessary for the purposes described, to comply with legal obligations, or to resolve disputes. When no longer needed, we delete or de-identify data.

Security

We apply reasonable technical and organizational measures appropriate to our business (e.g., access controls, encryption in transit, least-privilege practices). No system is 100% secure—please use strong, unique passwords and safeguard your credentials.

Cookies & Similar Technologies

• Types: essential (site functionality), analytics/performance, preference cookies.
• Choices: adjust browser settings or use consent tools where available. Disabling cookies may affect functionality.

Processing for Clients (Processor Role)

• When we process personal data on your behalf (e.g., building or maintaining your products), we follow your instructions and applicable agreements (SOW/DPA).
• You provide required notices and obtain necessary consents from your end users.
• We assist with data subject requests and incident notifications as agreed in a DPA.

Your Privacy Rights

• Depending on your location, you may access, correct, delete, restrict, port, or object to certain processing, and withdraw consent where processing is based on consent.
• To exercise rights, contact us; we will verify requests as required by law.
• For California residents, we honor applicable rights under the CCPA/CPRA and do not sell/share personal information for cross-context behavioral advertising.

International Transfers

If data is transferred across borders, we rely on appropriate safeguards (e.g., Standard Contractual Clauses or equivalent measures) where required by law.

Children’s Privacy

Our website and services target business users and are not directed to children under 16. We do not knowingly collect personal information from children.

Third-Party Links

Our site may link to third-party sites or services we do not control; their privacy practices govern those properties.

Updates to This Policy

We may update this Policy over time. The “Last updated” date reflects the latest revision. Material changes will be communicated as appropriate.