1. Introduction
This Privacy Policy explains how CodeDevlify ("CodeDevlify", "we", "us") collects, uses, shares, and protects personal information when you visit our website, create an account, or use our AI website builder, hosting, and related services (together, the "Services").
It should be read together with our Terms and Conditions. By using the Services you acknowledge the practices described here. If you do not agree, please do not use the Services.
2. Our Role: Controller and Processor
- As a controller — for information about you as our customer or a visitor to codedevlify.com, such as your account, billing, and support details, we decide how and why that information is used.
- As a processor — for information about visitors to Websites you build or host on CodeDevlify, and any personal data inside your own content, we act on your behalf and according to your instructions. You are responsible for providing your own privacy notice to your visitors and for having a lawful basis for that processing.
3. Information We Collect
Information you give us
- Account details — your name, email address, password (stored only as a secure hash), profile picture, and account preferences
- Social login data — if you sign in with Google or Facebook, we receive your name, email address, profile picture, and a provider account identifier. We do not receive your password for those services
- Billing details — billing address, country, phone number, subscription and invoice history, and the payment method type and last digits. Full card numbers are handled by our payment processors and never stored on our servers
- Website and AI data — the prompts you enter, the content, files, and code you upload, generated Websites, domain names, and DNS configuration
- Your own AI provider keys — if you connect your own AI provider API key, we store it encrypted and use it only to make requests you initiate
- Team information — the names and email addresses of team members you invite, and the roles you assign them
- Support communications — the content of support tickets, live-chat conversations, attachments you send us, and emails you exchange with us
Information collected automatically
- Security and audit records — records of significant actions such as sign-ins, password changes, billing changes, and Website changes, together with your IP address, browser user agent, and timestamps
- Usage data — pages you view on our website and in your dashboard, features you use, and device and browser information
- Hosting and resource data — server logs, CPU, memory, storage, and bandwidth usage for your Websites, and backup records
4. Data About Visitors to Your Websites
To provide site analytics, monitoring, and security for Websites hosted on CodeDevlify, we collect information about the people who visit them, including:
- IP address and the approximate country derived from it
- Browser user agent, device type, and operating system
- Pages viewed, referring site, and visit timestamps
- A pseudonymous visitor identifier used to count unique and returning visitors
We use this information only to provide analytics and protect the Services for you, and we do not sell it or use it to build advertising profiles of your visitors.
5. How We Use Your Information
We use personal information to:
- Create and manage your Account and authenticate you, including through social login
- Generate, build, host, and serve your Websites, issue SSL certificates, and run backups
- Process subscriptions, trials, payments, invoices, and refunds
- Provide customer support and respond to your requests
- Send service messages such as account verification, password resets, billing receipts, payment reminders, and security alerts
- Monitor performance, enforce plan limits, and plan capacity
- Detect, investigate, and prevent fraud, abuse, spam, and security incidents, and enforce our Terms
- Understand how the Services are used so we can improve them
- Send product news and offers where you have agreed to receive them. You can opt out at any time
- Comply with legal, tax, and accounting obligations
6. Legal Bases for Processing
Where data protection laws such as the GDPR or UK GDPR apply, we rely on the following legal bases:
- Contract — to provide the Services you signed up for, including your Account, Websites, and billing
- Legitimate interests — to secure the Services, prevent fraud and abuse, keep audit records, and improve our product, where these interests are not overridden by your rights
- Consent — for optional analytics cookies and marketing messages. You can withdraw consent at any time
- Legal obligation — to keep financial records and respond to lawful requests from authorities
7. AI Features and Your Data
When you use AI website generation, your prompts and relevant content are sent to third-party AI model providers (such as OpenAI, Anthropic, and Google) to produce the output you request. If you connect your own API key, requests are made to that provider under your own account with them.
We do not use your prompts or content to train our own AI models. Please avoid including sensitive personal data in prompts unless it is necessary and you are permitted to share it.
10. Data Retention
We keep personal information only for as long as we need it for the purposes in this Policy:
- Account and Website data is kept while your Account is active, and deleted or anonymised within a reasonable period after the Account is closed
- Website backups are kept for up to 30 days and then deleted automatically
- Billing and invoice records are kept for as long as tax and accounting laws require
- Security and audit records are kept for as long as needed to protect the Services and investigate incidents
- Support conversations are kept so we can refer back to them when helping you, and deleted on request where we have no legal reason to keep them
11. How We Protect Your Data
We use technical and organisational measures to protect personal information, including:
- Encryption in transit with HTTPS/TLS across our website, dashboard, and hosted Websites
- Password hashing, and encryption of stored third-party API keys
- HTTP-only, secure authentication cookies and short-lived access tokens
- Isolated databases for different parts of the platform, and back-end systems that are not exposed directly to the internet
- Role-based access controls, audit logging, and bot protection
No method of transmission or storage is completely secure. If we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities as required by law. Please keep your password confidential and tell us right away at [email protected] if you suspect unauthorised access.
12. International Data Transfers
CodeDevlify and our service providers may process information in countries other than the one you live in, including the United States. Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
13. Your Privacy Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and receive a copy of it
- Correct inaccurate or incomplete information
- Delete your personal information
- Restrict or object to certain processing, including direct marketing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting earlier processing
- Lodge a complaint with your local data protection authority
You can update most account details directly in your dashboard. For other requests, email us at [email protected]. We may need to verify your identity before acting on a request, and we will respond within the time limits required by applicable law.
California residents: under the CCPA/CPRA you may request to know, delete, or correct personal information, and you will not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.
If you are a visitor to a Website hosted on CodeDevlify, please contact that Website's owner first. We will help them respond to your request.
14. Children's Privacy
The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.
15. Third-Party Websites and Services
The Services may link to or integrate with third-party websites and services, including payment, login, and AI providers. Their own privacy policies govern how they handle your information, and we encourage you to read them.
16. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and notify you by email or in your dashboard before they take effect.
17. Contact Us
If you have questions about this Privacy Policy or how we handle your data, email us at [email protected] or use our contact page.