Privacy Policy

Effective date: December 5, 2025

This Privacy Policy explains how CodinIT Labs Incorporated ("CodinIT", "we", "our" or "us") collects, uses, discloses, and protects personal information when you visit https://codinit.dev (the "Site") or use our services (together, the "Services"). It also explains your rights and choices regarding your information.

This policy applies to information collected through the Site and Services and by CodinIT employees, contractors, and service providers. It should be read together with our Terms of Service.

1. Information we collect

a. Information you provide us

Account & profile information: name, email address, username, password, profile settings.
Payment & billing: payment card or other payment method details (processed by our payment processor — we do not store full payment card numbers on our servers).
User content: code, prompts, uploaded files (images, design files, project assets), and any text or media you submit to the Service.
Support & communication: messages you send to support, survey responses, and other correspondence.

b. Information we collect automatically

Usage and diagnostics: logs, feature usage, generated code metadata, error reports, timestamps, pages visited.
Device & connection: IP address, device identifiers, operating system, browser type and version, and geolocation derived from IP (approximate).
Cookies & similar technologies: session cookies, persistent cookies, and local storage to remember preferences, maintain sessions, and analyze usage.

c. Information from third parties

We may receive information about you from third-party services you connect (e.g., identity providers, payment processors) and from our analytics providers.

2. How we use your information

We use personal information for the following purposes:

Provide, operate, maintain and improve the Services and Site.
Process payments and manage subscriptions.
Authenticate users, manage accounts, and provide customer support.
Prevent, detect and respond to fraud, abuse or security incidents.
Research, product development and analytics (including improving models and features).
Comply with legal obligations and respond to lawful requests by public authorities.

AI training: We may use aggregated or de-identified usage data to train and improve models. For Enterprise customers, training use is excluded unless explicitly agreed in writing.

3. Legal bases for processing (for European users)

If you are an EU/EEA user, our legal bases include:

Performance of a contract: to provide the Services you signed up for.
Legitimate interests: improving the Service, fraud prevention, and platform security (we balance these interests against user rights).
Consent: where required (e.g., non-essential cookies and certain marketing communications).
Legal obligation: where processing is necessary to comply with law.

4. Sharing & disclosure

We do not sell your personal information. We may share your information with:

Service providers and subprocessors: hosting, analytics (e.g., PostHog, Google Analytics), payment processors, email providers, and customer support platforms who process data under contract.
Enterprise partners: when required by an enterprise contract or features you opt into.
Legal & safety: to comply with legal obligations, respond to lawful requests, or to protect rights, property or safety.
Business transfers: in connection with a merger, sale, reorganization, or asset transfer (with safeguards for personal data).

Third parties we use include PostHog and Google Analytics for analytics; their services and relevant privacy practices are described in our Site Notices. You can opt out of Google Analytics via the Google Analytics Opt-out Browser Add-on.

5. International transfers

CodinIT operates internationally and may transfer personal data to countries with different data protection laws. When we transfer data, we implement appropriate safeguards (standard contractual clauses, contracts, or other measures) to protect your data.

6. Data security

We use administrative, technical and physical safeguards (encryption in transit, access controls, periodic audits, staff training) to protect personal information. While we follow industry practices to protect data, no method of transmission or storage is 100% secure.

7. Data retention

We retain personal information only as long as necessary to provide the Services, comply with legal obligations, resolve disputes and enforce agreements. Retention periods vary by data type (account data, billing history, logs); typical ranges are:

Account & profile data: retained for the life of the account plus up to 2 years after account closure for backups, fraud prevention, and legal obligations.
Billing & transaction records: retained for at least 7 years to meet tax and accounting obligations (adjust as required by applicable law).
Logs & analytics: retained in aggregated or pseudonymized form where possible; raw logs retained for up to 12 months unless needed longer for security or legal reasons.

If you need a different retention schedule (for legal/regulatory reasons), please contact us to discuss options available for Enterprise plans.

8. Your rights & choices

Access, correction, deletion & portability

You may request access to, correction of, export of, or deletion of your personal data. We will respond to verifiable requests in accordance with applicable law.

Opt-outs & communications

Marketing: you can opt out of promotional emails at any time using the unsubscribe link or by contacting us.
Cookies: you can disable or restrict cookies via your browser settings (note that disabling certain cookies may affect functionality).
Analytics: opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on.

California residents (CCPA/CPRA)

California residents may have additional rights including the right to know categories of personal information collected, the right to request deletion, and the right to opt out of sale or sharing for targeted advertising. CodinIT does not sell personal data. Submit CCPA requests to contact@codinit.dev and include a clear description of your request.

EU/EEA users

You have rights under the GDPR including access, rectification, erasure, restriction, objection, and data portability. To exercise these rights, contact contact@codinit.dev.

9. Children

Our services are not directed to children under 18. We do not knowingly collect personal information from minors. If we learn we collected data from a child under 18, we will delete it unless retention is required by law.

10. Third-party links & embedded content

The Site may contain links to third-party sites or embedded content. We are not responsible for their privacy practices. Review third-party privacy policies before providing information.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Site with the Last Updated date. For material changes, we will provide notice (e.g., email or site banner) as required by law.

12. Contact us

Company: CodinIT Labs Incorporated Address: 81 - 83 Campbell Street, Surry Hills, NSW 2010, Australia Privacy contact: contact@codinit.dev

For urgent privacy matters, use the subject line: "URGENT - Privacy concern". We aim to acknowledge privacy inquiries within 7 business days.

13. Open Source Contribution Terms

CodinIT provides collaborative features that allow users to edit, contribute to, and improve shared project files, components, and other community resources ("Contributor Content"). By contributing, you agree to the following terms:

CodinIT reserves the right to moderate, edit, or remove Contributor Content that violates our policies, infringes rights, or is deemed inappropriate or harmful.
You agree not to distribute, publish, clone, or create your own derivative version of any component, file, or resource found within our codebase on GitHub or any other platform.
You acknowledge that unauthorized redistribution, cloning, or misrepresentation of CodinIT-owned materials may violate intellectual property laws and may be subject to legal action.
You may not remove or alter attribution, notices, or metadata associated with shared or collaborative resources.
You confirm that any content you contribute must be your own original work and must not infringe on the rights of any third party.