Privacy Policy

At Codex Technologies PBC, Inc. ("Codex," "we," "us," or "our"), we value your privacy and the importance of safeguarding your data. This Privacy Policy describes our privacy practices for our website at codex.xyz and related services. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals.

We are committed to protecting your privacy in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy regulations.

By using our website, you acknowledge that you have read and understood this Privacy Policy.

We collect the following types of personal data:

Information You Provide Directly:

• Email Address: When you subscribe to our newsletter or contact us, we collect your email address.
• Communications: Any information you provide when you contact us through email or other channels.
• Demo Bookings and Enquiries: When you book a demo or send us an enquiry, the details you enter, such as your name, work email, company, company website, expected monthly volume, region and message, and the meeting time you choose.

Information Collected Automatically:

• Analytics Data: Pages visited, time spent on pages, referring websites, browser type, device type, and general geographic location (country/region level), collected through Google Analytics and Vercel Web Analytics.
• How You Found Us: The link, ad or website that first brought you to our website and the most recent one, how many times you have visited, and the pages you viewed. When you book a demo or contact us, we attach this to your request so we know what brought you to us.
• Company and Visitor Identification: We use Leadfeeder, Snitcher and RB2B to identify the company a visit comes from, based on its IP address, and the pages it viewed. For visitors in the United States, RB2B may also match a visit to a professional profile. We use this to see which companies are interested in Codex, and we may combine it with business contact details from other sources to contact you or people at your company about our products, by email, LinkedIn or other channels. You can ask us to stop at any time by replying to our message or emailing contact@codex.xyz. When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.
• Log Data: Our servers automatically record information such as IP addresses, browser type, and access times.

We use cookies and similar technologies, such as your browser's local storage, for analytics and marketing: to understand how people find and use our website, and which companies visit it. Cookies are small text files stored on your device.

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask before setting any cookie that isn't essential, and none are set until you accept. Everywhere else they are on unless you decline or your browser sends a Global Privacy Control signal. You can change your choice at any time from Cookie Settings, at the bottom of every page.

Cookies we use:

• Essential: codex-consent remembers your cookie choice for 6 months, with a copy in your browser's local storage (codex-consent-latest) so your latest answer always counts. codex-consent-required records whether your location needs that choice, until you close your browser. These are always on.
• Analytics: Google Analytics (_ga and _ga_ followed by an ID), for up to 2 years.
• How you found us: codex-attribution remembers how you first and most recently found us and how many times you have visited, for 6 months after your latest visit. codex-journey, in your browser's local storage, lists the pages you have viewed here. After 6 months without a visit we stop using it, and delete it the next time you visit.
• Company and visitor identification: Leadfeeder (cookies starting _lfa, 1 year, with copies in your browser's local storage), Snitcher (snitcher_device_id, 1 year, plus session data in your browser's storage) and RB2B (cookies starting _reb2b, up to 1 year).

While cookies are off for you, because you haven't accepted them yet, you declined them or your browser sends a Global Privacy Control signal, Leadfeeder still identifies the company a visit comes from using its IP address, without storing anything on your device. We do this because we have a legitimate interest in knowing which businesses are interested in Codex, and you can object at any time by emailing contact@codex.xyz. You can also block or delete cookies in your browser settings.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Newsletter Subscriptions: We retain your email address until you unsubscribe or request deletion.
• Analytics Data: Aggregated analytics data is retained for up to 26 months.
• Log Data: Server logs are retained for security purposes and are automatically deleted after 90 days.

You may request deletion of your personal data at any time by contacting us at contact@codex.xyz.

In the event of a merger, acquisition, reorganization, bankruptcy, or other similar event, your personal data may be transferred to the acquiring organization. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal data, as well as any choices you may have regarding your personal data.

Any successor entity will be bound by the terms of this Privacy Policy with respect to your personal data.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Regular security assessments and updates
• Access controls limiting who can access personal data
• Secure hosting infrastructure

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at contact@codex.xyz.

If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

Depending on your location, you may have certain rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate personal data.
• Right to Erasure: You can request that we delete your personal data.
• Right to Restrict Processing: You can request that we limit the processing of your personal data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to the processing of your personal data for certain purposes, and to its use for direct marketing at any time.
• Right to Opt-Out: You can unsubscribe from our newsletter at any time using the unsubscribe link in our emails.
• Right to Opt Out of Tracking: You can decline cookies from Cookie Settings at the bottom of every page, and we treat a Global Privacy Control signal from your browser as declining. To opt out of advertising based on RB2B's matching, visit https://app.retention.com/optout, and to opt out of RB2B collecting your personal data under GDPR, visit https://www.rb2b.com/rb2b-gdpr-opt-out.

To exercise any of these rights, please contact us at contact@codex.xyz. We will respond to your request within 30 days.

You also have the right to complain to a data protection authority, such as the one in the country where you live or work.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending an email notification to newsletter subscribers for significant changes

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Codex Technologies PBC, Inc.

Email: contact@codex.xyz

Website: codex.xyz

We will respond to your inquiry as soon as possible, typically within 30 days.