Privacy Policy

CodeArc Labs (“CodeArc Labs”, “we”, “us”) is a global provider of AI-native software and IT solutions. Our regional office is in VA, USA.

We are the data controller for the personal data collected through this website. The website is a marketing and inquiry site: we use the information it collects to respond to enquiries, discuss potential projects and hiring requests, and keep the site secure and working well.

This Privacy Policy forms part of our Terms of Service. We review it periodically, so please check back from time to time.

Information you give us

• Contact form details: name, company, email address, phone number, the services you are interested in, budget range and your project description.
• Messages you type into the AI assistant on the site.
• Anything else you choose to send us when you write to us, book a consultation or ask about hiring a developer.

Information collected automatically

• Technical data your browser sends when you visit: IP address, browser and device type, the pages you request, the referring page and timestamps.
• Standard server logs kept by our hosting and delivery providers to deliver pages, prevent abuse and diagnose problems.

At the time of writing we do not run advertising or cross-site tracking on this website. If we add analytics or marketing tools, we will update this policy first.

We use personal data to:

• respond to your enquiry and discuss whether and how we can help;
• operate, secure and improve the website;
• comply with legal obligations and protect our legal rights.

We share personal data only where needed, with:

• service providers that host the website and deliver its pages and forms;
• the email, CRM and workflow tools we use to receive and route enquiries;
• the AI model provider that generates replies in the assistant (see the next section);
• professional advisers, and authorities where the law requires it, or to establish, exercise or defend legal rights, or to prevent fraud and abuse;
• a successor, if our business is reorganised, merged or sold, subject to the protections in this policy.

We do not sell your personal data, and we do not share it with third parties for their own marketing without your consent. Phone numbers you give us are not shared for third-party marketing.

The assistant in the bottom-right corner answers questions about our services. When you send a message, your conversation is transmitted to our server and then to a third-party AI model provider so it can generate a reply. The provider processes that text under its own terms and privacy policy.

• Please do not enter passwords, payment details, health information or other sensitive data.
• We do not store your chat conversations on our servers. They are kept in your browser's session storage so the conversation is still there if you move between pages, and they disappear when you close the tab or choose “new conversation”.
• The assistant provides general information only. It cannot make commitments for us, and it does not make decisions about you.

When you send us an enquiry, you ask us to contact you about it, and we will reply by email or phone. We send marketing communications only if you have agreed to receive them, and every message will include a simple way to opt out. You can also opt out at any time by contacting us through the contact page.

We keep enquiry details for as long as we need them to respond and to manage any business relationship that follows. If no relationship begins, we generally delete or anonymise enquiry details within 12 months.

If you ask us to delete your data, we will do so unless we are legally required to keep it. We do not keep personal data indefinitely.

This website uses only a small amount of browser storage, and only for functions you would expect:

• Session storage that remembers that the opening animation has played and keeps your assistant conversation for the current tab.
• Technical cookies or logs our hosting provider may set or keep to deliver the site securely.

We do not use advertising or targeting cookies. You can block or delete cookies and site data in your browser settings at any time; the site will continue to work.

We work with clients around the world, and our service providers may process data in the United States and in other countries. Where the law requires safeguards for international transfers, we rely on appropriate protections such as contractual clauses with our providers.

Depending on where you live, you may have some or all of the following rights, including under US state privacy laws and, where it applies, the GDPR:

• Information and access: to ask whether we hold personal data about you and to receive a copy.
• Correction: to have inaccurate or incomplete data corrected.
• Deletion: to ask us to delete your data where there is no lawful reason to keep it.
• Restriction and objection: to ask us to pause or stop certain processing, including direct marketing.
• Portability: to receive your data in a structured, commonly used format.
• Withdrawing consent: at any time, for processing that relies on consent.
• Opting out of sale or sharing: we do not sell personal data or share it for cross-context advertising.

To exercise a right, contact us through the contact page. We may need to verify your identity first. You also have the right to complain to your local data protection or consumer protection authority.

We do not use your personal data to make decisions that have legal or similarly significant effects on you by automated means, and we only carry out profiling for marketing if you have agreed to receive marketing from us.

We protect personal data with reasonable technical and organisational measures, including:

• encrypted connections (HTTPS) between your browser and the website;
• restricting access to enquiry data to people who need it, under confidentiality obligations;
• keeping secret keys and credentials on the server, never in the browser;
• reviewing our practices regularly.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

This website is intended for businesses and is not directed to children under 13. We do not knowingly collect their personal data.

We may update this policy from time to time. The “Last updated” date at the top of the page shows when it was last revised.

Questions about this policy or your data? Reach us through the contact page.