Privacy Policy

1. Introduction

CODCOST ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform at codcost.io.

By using our Platform, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Platform.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, phone number, password
• Business information: company name, store name, business address
• Payment information: processed securely through Polar.sh (we do not store card details)
• Communications: messages, support tickets, and feedback you send us

2.2 Information Collected Automatically

• Usage data: pages visited, features used, actions taken on the Platform
• Device data: IP address, browser type, operating system
• Order and transaction data: order volumes, confirmation rates, revenue metrics
• Log data: error logs, performance data, and API request logs

2.3 Information from Third-Party Integrations

When you connect third-party services to CodCost, we may receive:

• Meta (Facebook): Ad account IDs, Pixel IDs, ad spend data, campaign performance metrics — used exclusively to calculate ROAS and send Conversions API events on your behalf
• E-commerce platforms (Shopify, YouCan, LightFunnels): Order data, product data, customer information associated with orders
• Shipping providers: Delivery tracking data and logistics information
• WhatsApp Business API: Message delivery status and customer interaction metadata

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform and its features
• Process your subscription and usage-based billing
• Send Conversions API (CAPI) events to Meta on your behalf to improve your ad attribution
• Generate analytics, reports, and performance dashboards for your business
• Send transactional emails and important account notifications
• Respond to support requests and provide customer service
• Improve, personalize, and develop new features of the Platform
• Detect, prevent, and address fraud or security issues
• Comply with applicable laws and legal obligations

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information. We may share your information with:

• Service providers: Companies that help us operate the Platform (cloud hosting, payment processing, email delivery) under strict data processing agreements
• Shipping partners: Order data shared with carriers you have authorized to fulfill deliveries
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to users

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account termination:

• Account data is deleted or anonymized within 90 days
• Financial records may be retained for up to 7 years as required by applicable tax laws
• You may request earlier deletion by contacting us at legal@codcost.io

7. Data Security

We implement industry-standard security measures to protect your data, including:

• TLS/SSL encryption for all data in transit
• Encrypted storage for sensitive credentials and access tokens
• Role-based access controls limiting employee access to user data
• Regular security audits and vulnerability assessments

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your data in certain circumstances
• Withdraw consent: Disconnect third-party integrations at any time

To exercise any of these rights, contact us at legal@codcost.io. We will respond within 30 days.

9. Data Deletion

You can request complete deletion of your data at any time. To do so:

• Email us at legal@codcost.io with subject "Data Deletion Request"
• Or visit our Data Deletion page

We will process your request within 30 days and confirm deletion.

10. Cookies

We use essential cookies to maintain your session and authentication. We do not use tracking cookies or third-party advertising cookies. You can control cookie behavior through your browser settings.

11. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you become aware that a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Platform. The date at the top of this policy reflects the last update. Your continued use of the Platform constitutes acceptance of the updated policy.