Privacy & Cookie Policy

Scope

This Policy applies to:

• Codaro website codaro.dev and its subpages
• User accounts and SaaS dashboard
• IDE plugins/extensions transmitting developer activity signals ("heartbeats") - see also our EULA
• Support communications and email interactions

Data We Collect

Information You Provide

• Account data: name, email, password hash, optional profile photo
• Organization/team data: team name, role, permissions
• Billing data: country, VAT ID (if applicable), billing address, payment history (handled via external payment provider)
• Messages and attachments sent to support

Data Collected Automatically

• IDE plugin signals (heartbeats): user/instance ID, timestamp, project/repo name, edited file/entity (path may be masked per your settings), language, lines of code, activity flags (write/debug), session metadata, optional code diffs/summaries (if enabled)
• Analytics & logs: server logs, device identifiers, app events, cookies/trackers (details in Cookie Policy)
• Transaction data: subscription status, renewals, invoices (via payment processor)

Purposes & Legal Bases (GDPR Art. 6)

You can withdraw consent anytime without affecting past lawful processing.

Data Sources

We collect data directly from you, from your devices/IDEs (if you install our plugin), and from integrations you choose (e.g. GitHub, payment provider).

Data Sharing & Transfers

• Hosting and infrastructure: Google Cloud Platform (Cloud Run, Cloud SQL, BigQuery)
• Payments: Stripe/other provider
• Analytics, email, customer support, accounting services

If data is transferred outside the EEA, we rely on GDPR-compliant safeguards such as Standard Contractual Clauses (SCCs).

Security Measures

• Transport encryption: All traffic uses SSL/TLS (HTTPS)
• At-rest encryption: wherever possible (databases, disks)
• Access control with least privilege
• Logging & monitoring, backups
• Regular updates, penetration testing
• See more details at /security

Retention Periods

• Account & service data: as long as the account is active + up to 6 years (for accounting/legal)
• Logs & telemetry: 30–365 days depending on type
• Marketing data: until consent is withdrawn or opt-out is requested
• IDE heartbeats: per user's retention settings in dashboard (default: 12 months)

After expiry, data is anonymized or securely deleted.

Your Rights (GDPR Articles 12–22)

You have the right to:

• Access, rectify, erase, restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time
• File a complaint with your supervisory authority (e.g. in Poland: UODO)

Contact: info@codaro.dev – requests are handled within 30 days.

Children

Our services are not intended for children under 16. If you believe a child provided data, contact us to have it deleted.

Cookies & Similar Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us recognize your browser, remember preferences, and provide secure and personalized services.

Cookies enable essential functionality like keeping you logged in, remembering your language preferences, and ensuring the security of your account.

Types of Cookies We Use

Managing Cookies

Updates

We may update this policy from time to time. Significant changes will be announced via email or in-app notifications.

Contact