Privacy Policy — What we collect

We collect only the data required to deliver and improve our services. This may include:

• Account information (name, email, company)
• Billing and payment information (stored securely via third‑party processors)
• Usage and telemetry (to improve product experience)
• Support and communication history

We never sell personal data to third parties. Data sharing only occurs with vendors who process data under our instructions and with appropriate safeguards.

Security — How we protect your data

Protecting your data is a top priority. Our security practices include:

• Encryption in transit (TLS 1.2+) and at rest where practical
• Role-based access control and least-privilege principles
• Regular vulnerability scanning and third-party security assessments
• Audit logging and incident response playbooks

If a security incident affects your data, we’ll notify affected customers promptly and work to remediate the issue.

Cookie & Tracking Policy

We use cookies and similar technologies to make our site work and to analyze traffic. Categories:

• Essential: required for basic site functionality.
• Analytics: aggregate usage to improve features.
• Preferences: remember UI preferences like theme.

You can manage cookie preferences via your browser or our cookie settings panel.

Terms of Service — Key points

These are the highlights of our Terms. For the full legal agreement, please request the complete Terms of Service.

1. Customers must provide accurate account and billing details.
2. Subscription-based billing is billed in advance and non-refundable unless stated otherwise.
3. Customers are responsible for their account credentials and API keys.
4. We reserve the right to suspend services for violations or security concerns.

Acceptable Use Policy

Use of Code Aspect services must not violate laws or be used to transmit harmful content. Prohibited activities include:

• Unauthorized access, hacking, or distribution of malware
• Sending spam, unsolicited marketing, or phishing attempts
• Hosting or distributing illegal content

Violations may result in termination of service and legal action where applicable.

Data Retention & Deletion

We retain customer data only as long as necessary to provide services, fulfill legal obligations, or as requested by customers. Key points:

• Account data is retained while the account is active.
• Deleted accounts enter a 30-day grace period before permanent deletion (unless a different retention period is required by contract or law).
• Backups are rotated and may remain encrypted for up to 90 days for disaster recovery.

Privacy Controls & Requests

Customers can exercise the following rights by contacting our privacy team:

• Access the personal data we hold about your account
• Request correction or deletion of inaccurate personal data
• Export your account data in a machine-readable format

To make a request, see the contact details below. We respond to legitimate requests within a reasonable timeframe and as required by law.