Privacy Policy

1.

Who We Are

CodeWorth is a full-stack development agency providing custom software development and related technology services based in Kolkata, West Bengal, India.

Our official website is: https://www.codeworth.codes/

For privacy-related questions, notifications, or requests, you may contact us using the official agency contact details displayed on our website.

Official Privacy Contact: codeworth.official@gmail.com

Please direct all privacy correspondence to the official agency email above. Individual founder personal email addresses are not designated privacy contact channels.

2.

Information We May Collect

The information we collect depends on how you interact with CodeWorth and on the features actually enabled across our website and communication channels.

2.1Information You Provide Directly

When you contact us, request a quotation, discuss a project, submit a website enquiry, or communicate with our team, we may collect information including:

Your name
Telephone or WhatsApp number (submitted through our contact form or direct communication)
Email address (when you write to us via email)
Company or organization name (where provided)
Project or service requirements and technical specifications
Budget, timeline, or operational details that you choose to disclose
Enquiries, messages, notes, attachments, or documents you share with us

Security Notice: Please do not submit passwords, payment-card details, authentication tokens, API secrets, sensitive personal identifiers, or confidential credentials through general-purpose website forms.

2.2Technical Information and Runtime Logging

When you access our website, technical request information is automatically processed by the website infrastructure and our cloud hosting platform (Vercel) to deliver web pages securely and reliably.

Depending on the actual deployment configuration, this may include:

IP address and general geographic region
Browser type and version
Device type and operating system
Referring URL and landing page
Pages viewed and navigation timestamps
Diagnostic, security, and error monitoring information

Enquiry Form Processing & Logging: When you submit an enquiry via our contact form, the data (name, phone number, and message) is processed by serverless functions on Vercel and transmitted via our email delivery provider (Resend). As part of standard server runtime operations and diagnostic error handling, copies of submitted enquiries or transmission metadata may be recorded in temporary server execution logs, console output, or email delivery logs to ensure deliverability and diagnose technical failures.

2.3Cookies and Similar Technologies

CodeWorth respects your online privacy and maintains a minimal-tracking policy on its public marketing pages:

No Public Analytics or Tracking Cookies: The public website does not employ third-party advertising cookies, marketing pixels (such as Meta Pixel), Google Analytics cookies, or visitor tracking beacons.
Essential Administrative Cookie Only: The website utilizes a single, strictly essential session cookie ('codeworth_session'). This is an encrypted, httpOnly, secure cookie deployed solely when agency administrators log into the private administrative management panel (/admin). General visitors navigating the public website are not subjected to tracking cookies.
No Local or Session Storage Tracking: The website does not use browser localStorage or sessionStorage to track or store visitor identities.
Third-Party Links: External platforms linked from our website (including WhatsApp, GitHub, LinkedIn, Instagram, Facebook, or X) may place or read their own cookies according to their independent privacy policies when you visit their services.

3.

How We Use Information

We use the information we receive solely for legitimate business purposes, including:

Responding to your enquiries and project requests
Communicating with prospective, current, or former clients
Assessing technical and architectural project requirements
Preparing preliminary estimates, formal proposals, quotations, and statements of work
Developing, delivering, hosting, maintaining, and supporting software services
Managing client communications and operational relationships
Improving website reliability, performance, and user experience
Maintaining website security, investigating suspected abuse, and preventing malicious traffic
Troubleshooting software bugs, server exceptions, and connectivity errors
Complying with applicable legal, regulatory, tax, or accounting requirements
Protecting our legitimate business interests, property, and legal rights
Establishing, exercising, or defending legal claims

We do not use personal information for materially unrelated or unnotified secondary purposes without obtaining necessary consent or legal authorization.

4.

Legal Basis and Consent

Where applicable law requires a recognized legal basis for processing personal data, CodeWorth processes information under appropriate grounds, such as your consent, the performance of a requested service or contract, compliance with legal obligations, or other legitimate statutory grounds.

Where processing is based on your consent, you may withdraw your consent at any time by contacting us. Withdrawal of consent does not invalidate lawful processing carried out prior to such withdrawal.

Under India's Digital Personal Data Protection framework, the specific legal rights, notice obligations, and processing standards applicable to a given processing activity are governed by the Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025, as applicable under applicable law and as the statutory provisions come into force through staged commencement. CodeWorth does not represent that provisions not yet formally operational have come into effect before their notified commencement dates.

5.

Communication and Enquiries

When you contact CodeWorth via our website contact form, direct email, phone, WhatsApp, or official social media channels, we retain communications and contact details as necessary to:

Answer your queries and provide technical guidance
Continue commercial and technical discussions
Draft proposals and service agreements
Maintain appropriate business, contractual, and communication records

Direct communications conducted through third-party platforms (such as WhatsApp, Instagram, Facebook, or X) are additionally governed by the respective platform's privacy terms and data-handling policies.

6.

How We Share Information

CodeWorth does not sell, rent, or trade your personal information to third parties as a business practice.

We share information only where reasonably necessary with:

Service Providers

We engage trusted third-party technology providers that assist in operating our website and delivering client services. Only providers actually utilized by CodeWorth are engaged:

Vercel Inc.: Website hosting, serverless edge infrastructure, deployment, and static asset delivery.
Resend Inc.: Transactional email dispatch used to deliver website contact-form enquiries to our studio team.
Vercel Blob: Cloud asset storage used for administrative media hosting.
WhatsApp (Meta Platforms): Client messaging and support communication when initiated by the client.

Professional Advisors

Where reasonably required, information may be shared with professional legal, financial, accounting, tax, or compliance advisors who are subject to professional duties of confidentiality.

Legal and Security Requirements

We may disclose information where required by applicable law, court order, subpoena, or lawful governmental authority, or where reasonably necessary to investigate abuse, prevent cybersecurity incidents, enforce our terms, or protect the legal rights and safety of CodeWorth, our clients, or the public.

7.

Third-Party Services and External Links

Our website contains direct links to third-party services and social media platforms, including:

Instagram (Official agency profile: @codeworth.official)
Facebook (Official agency profile)
X / Twitter (Official agency profile: @CodeWorthoffcl)
GitHub (Repository and code hosting)
LinkedIn (Professional agency and founder profiles)
WhatsApp (Direct messaging links)

When you click an external link, you leave our website. CodeWorth has no control over and assumes no responsibility for the content, privacy policies, or tracking practices of external third-party websites or services.

8.

Data Retention

We retain personal data only for the duration reasonably necessary to fulfill the specific purposes for which it was gathered, including responding to initial enquiries, executing client agreements, maintaining statutory accounting records, resolving disputes, and enforcing our rights.

Serverless runtime logs, console diagnostics, and email delivery records generated during form submission or site access are maintained in accordance with the standard retention schedules of our infrastructure providers (Vercel and Resend), after which they are systematically overwritten or expunged.

When personal information is no longer needed, we securely delete, anonymize, or archive it in accordance with applicable legal requirements.

9.

Data Security

CodeWorth implements reasonable technical and organizational safeguards designed to protect personal data against accidental loss, unauthorized access, disclosure, alteration, or misuse. Measures include:

Enforced TLS/HTTPS encryption across all web traffic and API endpoints
Strict Content-Type header options ('nosniff') to mitigate MIME confusion attacks
Encrypted, httpOnly, SameSite session cookies for administrative authentication
Secure cryptographic password hashing (bcrypt) with constant-time verification
Restricted administrative access and secure environment variable isolation
Honeypot form protection to filter out automated malicious submissions

While we apply rigorous security controls, no internet-connected platform can guarantee absolute security. Users are advised to avoid transmitting sensitive credentials, passwords, or payment cards through public web forms.

10.

International Data Processing

Certain cloud technology providers utilized by CodeWorth (such as Vercel and Resend) maintain globally distributed server infrastructure, which may result in technical processing or data storage outside India.

Where cross-border data processing occurs, CodeWorth takes reasonable measures appropriate to the nature of the processing and applicable legal standards.

Cross-border transfers of personal data will be conducted in accordance with provisions of the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, including any future restrictions or requirements notified by the Central Government of India as they come into force.

11.

Your Rights

Subject to the requirements, conditions, and staged commencement of applicable data protection law, you may be entitled to exercise certain rights regarding your personal information, such as:

Right to Access: Request confirmation of whether personal data is being processed, and obtain a summary of such data and processing activities.
Right to Correction and Completion: Request the correction of inaccurate personal data or the updating of incomplete information.
Right to Erasure: Request the deletion or erasure of personal data that is no longer necessary for the purpose for which it was collected or where consent is withdrawn, unless retention is required by law.
Right to Withdraw Consent: Withdraw consent previously granted for optional processing activities.
Right to Grievance Redressal: Lodge a grievance regarding our data processing practices.
Right to Nominate: Nominate an individual to exercise data rights on your behalf in the event of death or incapacity, where applicable under notified law.

Under the Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025, statutory rights are available and exercisable in accordance with the Act and Rules as they come into force.

12.

How to Exercise Your Rights

To submit a data access, correction, erasure, or privacy-related request, please reach out to CodeWorth via:

Email: codeworth.official@gmail.com

Please provide sufficient information in your request to enable us to verify your identity and locate the relevant records. We may seek reasonable additional verification before taking action to safeguard against unauthorized disclosure.

All requests will be handled promptly in accordance with the statutory procedures and timelines prescribed under applicable law as they come into effect.

13.

Children's Privacy

The CodeWorth website is intended for a general business audience, entrepreneurs, and professional clients. It is not directed at or targeted toward children.

We do not knowingly collect personal information from individuals under the age of 18 through our website enquiry channels. If we become aware that personal information of a child has been submitted inadvertently without requisite parental or guardian authorization, we will take steps to promptly delete such data.

14.

Changes to This Privacy Policy

CodeWorth may periodically review and update this Privacy Policy to reflect changes in our website features, technological infrastructure, business operations, or legal and regulatory standards.

When revisions occur, the updated 'Last Updated' date at the beginning of this policy will be revised accordingly. Material updates will be communicated through reasonable website notices or other appropriate channels where required by law.

Your continued use of the website following the posting of an updated Privacy Policy signifies your acknowledgment of the revised practices.

15.

Contact Information

If you have any questions, concerns, or grievances regarding this Privacy Policy or CodeWorth's handling of personal information, please contact our team:

Agency: CodeWorth

Website: https://www.codeworth.codes/

Official Email: codeworth.official@gmail.com

Phone / WhatsApp: +91 98329 00366

Address: Kolkata, West Bengal, India