Privacy Policy

Codimium (“we,” “us,” or “our”) is a software engineering company specializing in custom web applications, mobile platforms, and AI integrations for businesses. This Privacy Policy explains how we handle personal information when you visit codimium.com(the “Site”), submit our contact form, or interact with services linked from the Site.

We are committed to transparency and responsible data handling. By using the Site, you acknowledge that you have read this Privacy Policy. If you do not agree with our practices, please do not use the Site or submit personal information through it.

Information you provide directly

When you use our contact form, we may collect the following details:

• Full name
• Work email address
• Company name (optional)
• Selected project domain or technology area
• Project scope or message description

Information collected automatically

When you visit the Site, certain technical information may be processed automatically, including:

• IP address (used for rate limiting, abuse prevention, and bot verification)
• Browser type, device type, and operating system
• Pages viewed, referring URLs, and general usage patterns
• Theme preference stored locally in your browser (light or dark mode)

AI assistant interactions

The Site includes an AI chat widget powered by Codimium's assistant platform (assistant.codimium.com). Messages you send through that widget may be processed to provide responses and improve service quality. Do not share sensitive personal, financial, or confidential business information through the chat unless you intend for us to receive and process it.

We use personal information for legitimate business purposes, including to:

• Respond to inquiries, project requests, and support messages
• Evaluate potential client engagements and prepare proposals
• Operate, maintain, and improve the Site and our services
• Protect the Site against spam, fraud, and unauthorized access
• Comply with applicable legal obligations

We do not sell your personal information. We do not use contact form submissions for unrelated marketing without your consent.

Where applicable data protection laws require a legal basis, we rely on one or more of the following:

• Consent — when you voluntarily submit the contact form or interact with our AI assistant
• Legitimate interests — to operate and secure the Site, prevent abuse, and communicate with prospective clients
• Contractual necessity — when processing is needed to respond to or fulfill a request you have made
• Legal obligation — when we must retain or disclose information to comply with law

We use trusted third-party providers to operate the Site. These providers may process personal information on our behalf only as needed to deliver their services:

• Cloudflare Turnstile — bot and abuse verification on the contact form
• Hostinger — email delivery for contact form submissions via SMTP
• Google Fonts — typography delivery (Jost typeface)
• Codimium AI Assistant — on-site chat widget hosted at assistant.codimium.com

External links on the Site — including our profiles on GitHub, LinkedIn, and Facebook — are governed by those platforms' own privacy policies. We encourage you to review their policies before sharing information with them.

The Site uses limited browser storage and third-party technologies:

• Theme preference — stored in localStorage to remember your light or dark mode choice
• Cloudflare Turnstile — may set cookies or use similar technologies to distinguish humans from automated traffic
• AI chat widget — may use session or functional storage to maintain conversation context

We do not currently deploy third-party advertising or analytics cookies (such as Google Analytics or Meta Pixel) on the Site. If that changes, we will update this policy accordingly.

You can control cookies through your browser settings. Disabling certain cookies may affect form verification or chat functionality.

We retain personal information only for as long as necessary for the purposes described in this policy:

• Contact inquiries — typically retained for up to 24 months after our last communication, unless a longer period is required for ongoing business discussions, contractual obligations, or legal compliance
• Server and security logs — retained for a limited period necessary to investigate abuse and maintain system integrity
• AI chat records — retained according to our internal assistant platform policies and operational needs

When information is no longer needed, we take reasonable steps to delete or anonymize it.

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include rate limiting on form submissions, bot verification, secure email transmission, and access controls on systems that store inquiry data.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your information, subject to legal exceptions
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent
• Lodge a complaint with a relevant data protection authority

To exercise these rights, contact us at Admin@codimium.com. We may need to verify your identity before fulfilling a request.

Codimium operates as a remote-first software company serving clients internationally. Your information may be processed in Pakistan and in other countries where our service providers operate. Those countries may have data protection laws that differ from those in your jurisdiction.

When we transfer personal information across borders, we take reasonable steps to ensure appropriate safeguards are in place, consistent with applicable law.

The Site is intended for business professionals and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top of this page indicates when the policy was most recently revised. Material changes will be posted on this page. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or how we handle personal information, please contact us: