How we handle your data

Who we are

Codava is a software company that plans, designs and builds software for businesses. This policy explains what personal data we collect through codava.io, including Devo, our AI project assistant, why we collect it and the choices you have.

For any privacy question or request, email us at [email protected].

What we collect

• Account details: your email address and name, and your Google account id if you sign in with Google. Sign-in codes are stored only as a one-way hash and deleted within a day.
• Gender (male or female): optional. You set it on your account page, or we take it from your Google account when you sign in with Google if you set it there and allowed us to see it. We use it only to address you the right way, and you can change it on your account page at any time.
• Blueprint content: the description you write, your answers, the changes you request and the blueprint Devo prepares. We store this content encrypted.
• Contact and discussion requests: the name, email and message you send us.
• Technical data: your IP address, used to apply fair-use limits and protect the service and stored only as a one-way hash for that purpose, plus the cookies needed for your session, security and language.
• Website analytics: if enabled, we use a third-party analytics tool to measure how pages are used so we can improve the website.

How we use it

• To sign you in, save your blueprints in your account and let you return to them.
• To address you the right way on the website, in our emails and in Devo's replies, based on the gender you set.
• To apply usage limits for each account so the free experience stays available to everyone.
• To reply to your requests and, when you ask us to discuss a project, to prepare that discussion.
• To send you offers and news by email, only if you agreed to receive them.
• To keep the website secure and to improve our services.

Devo and AI processing

To prepare your questions and blueprint, and to read it aloud, the information you write is sent to a third party that processes it on our behalf. Please do not include sensitive personal data in your description, such as health or financial details.

A blueprint is an initial, AI-assisted concept. Our team reviews it with you before any scope, cost or timeline is agreed.

Offers and news by email

We send offers and news only if you tick the optional consent box. You can withdraw your consent at any time from your account page or through the unsubscribe link in every marketing email. Messages about your account and your requests are not marketing and still reach you.

Who can see your data

• Our team sees your blueprint only if you choose to attach it when you request a discussion.
• We send some data to third parties that help us analyse what you send so you get better results, and they process it on our instructions.
• We do not sell your personal data.

How long we keep it

• Your account details and blueprints stay until you delete them or delete your account.
• Discussion and contact requests are kept as business records for as long as we need them for that relationship.
• Technical records of AI requests are kept for a limited period for security and cost control.

Your rights

You can see your blueprints, correct your name, change your email language and preferences in your account, delete any blueprint, and delete your account with all its blueprints at any time. To access, correct or delete other data we hold about you, email [email protected] and we will reply within a reasonable time.

Security

We encrypt blueprint content at rest, use secure connections, limit access to authorised team members and protect accounts with one-time sign-in codes.

Children

Our services are meant for businesses and adults. We do not knowingly collect data from children.

Changes to this policy

When we change this policy we update the date at the top of this page, and we tell account holders by email about important changes.