Privacy Policy

This policy explains what we collect, why, and what you can ask us to do about it. It covers the CodesDen website and the business software at codesden.com/apps. It is written to comply with India's Digital Personal Data Protection Act, 2023.

The data fiduciary is CodesDen, T.Y.C. Phase-II, Agra, Uttar Pradesh 282006, India.

1. What we collect

When you enquire through the website — your name, phone number, email if you give one, and what you wrote in the form or chat.

When you create a software account — your name, business name, email address, WhatsApp number, phone number, city, and the type of business you run. Email and password are your sign-in; the rest lets us support you properly and decide which software to build next.

Business data you enter into the software — invoices, customers and suppliers, items, payments and ledgers. This is your own business record. We store it so the software works; we do not mine it.

Collected automatically — your IP address and the pages you visit, kept for security and to understand which pages are useful. Failed sign-in attempts are logged with the IP address to block password guessing.

We do not collect or store card numbers, UPI PINs or bank credentials. Payments happen in your own UPI app; we only see that a payment arrived.

2. Why we use it

• To give you the software and keep your account working.
• To answer your questions on WhatsApp, phone or email.
• To tell you when a trial or subscription is about to end.
• To keep the service secure and to detect misuse.
• To meet our legal and accounting obligations.
• With your consent, to tell you about new software and offers. You can withdraw this consent at any time and we will stop.

We do not sell, rent or trade your personal data. We do not run advertising networks on your data.

3. WhatsApp messages

WhatsApp is our main support channel because it is the one our customers actually read. Service messages — a reply to your question, a trial-expiry reminder, a payment confirmation — are part of providing the service. Promotional messages about new software are sent only if you ticked the box at signup, and every one of them can be stopped by replying STOP or telling us.

4. Who else sees your data

Only where it is necessary, and never for their own purposes:

• Our hosting provider, which runs the servers your data sits on.
• Google Analytics, which gives us anonymous page-visit statistics for the public website. It does not run inside the software.
• Google Gemini, if you use the chat assistant on the website — your message text is sent to it to generate a reply. Do not put sensitive information into the website chat.
• A lawful authority, where we are legally required to disclose.

Your business data inside the software is not shared with any third party at all.

5. Where your data is kept, and how it is separated

Data is stored on servers in India. Inside the software, every customer gets their own separate set of database tables. One customer's records are not merely filtered out of another's view — they are in different tables entirely, so they cannot be reached by accident.

6. Security

• Passwords are stored as one-way hashes. Nobody at CodesDen can read your password.
• The live site is served over HTTPS.
• Sign-in attempts are rate-limited to block password guessing.
• Forms are protected against cross-site request forgery.
• Backend files, database credentials and schema files are blocked from public access.

No system is perfectly secure. If a breach ever affects your data, we will tell you and the Data Protection Board as the law requires.

7. How long we keep it

• Website enquiries — up to 3 years, so we can pick up an old conversation.
• Account and business data — for as long as your account exists. If your subscription lapses we keep it so nothing is lost if you come back.
• If you ask us to delete your account — we remove your data, including your business tables, within 30 days. Records we must keep for tax or legal reasons are the only exception.
• Failed sign-in logs — cleared after 24 hours.

8. Your rights

Under the DPDP Act you may ask us to:

• tell you what personal data of yours we hold and who we shared it with;
• correct anything inaccurate or incomplete;
• delete your data, where we are not required to keep it;
• withdraw a consent you gave — for marketing messages, for instance;
• nominate someone to exercise these rights if you die or become incapacitated.

Write to support@codesden.com and we will respond within 30 days. There is no charge.

9. Grievance officer

If you are unhappy with how we have handled your data, contact our grievance officer:

Grievance Officer, CodesDen
Email: support@codesden.com
Address: T.Y.C. Phase-II, Agra, Uttar Pradesh 282006, India

If we do not resolve it to your satisfaction, you may complain to the Data Protection Board of India.

10. Cookies

We use a session cookie to keep you signed in — without it, the software cannot tell one page request from the next. Google Analytics sets its own cookies on the public website to count visits. There are no advertising or tracking cookies. Blocking cookies will stop sign-in from working.

11. Children

Our software is for businesses. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, tell us and we will delete it.

12. Changes

If this policy changes, the date at the top changes with it. Where a change materially affects you, we will tell you by WhatsApp or email before it takes effect.

Terms & Conditions · Privacy Policy · Refund & Cancellation · Delivery Policy · Contact Us