Privacy Policy
At Codevows, your privacy is paramount. This Privacy Policy explains how we collect, protect, utilize, and respect your personal information when you visit codevows.com and use our engineering learning tracks.
Zero Data Selling
We will never sell, rent, broker, or monetize your personal information to third-party ad networks or data brokers.
Secure Payments
Credit card details and UPI PINs are processed directly by PCI-DSS Level 1 payment gateways and never touch our servers.
Right to Erasure
You retain complete control over your data and can request permanent account deletion at any time via a single email.
1. Scope & Data Controller Overview
This Privacy Policy applies to personal data collected by Codevows ("we", "our", "us") through our website located at https://codevows.com, our software learning environments, and our transactional support channels.
For the purposes of applicable data protection legislation—including the European Union General Data Protection Regulation (EU GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA / CPRA), and the Indian Digital Personal Data Protection Act (DPDP Act 2023)—Codevows is the Data Controller responsible for the processing of your personal information.
2. Information We Collect
We collect only the minimum personal data necessary to provide you with secure access to our engineering curriculum:
A. Information You Provide Directly
Email Address: Required to authenticate your identity via passwordless One-Time Passcodes (OTP), maintain your active course entitlements, and dispatch important transactional receipts.
Profile & Support Inquiries: If you voluntarily reach out to our engineering support team via email, we collect the text of your message, any attached diagnostics, and your return contact address.
B. Information Collected Automatically
Device & Technical Telemetry: When you browse Codevows, our systems automatically log your Internet Protocol (IP) address, browser brand/version, operating system, referring URL, time stamps, and pages accessed. This telemetry is strictly used to monitor server health, mitigate malicious DDoS attacks, and prevent fraudulent credential pooling.
Learning State & Challenge Code: We store your progress within curriculum tracks and code editor states locally or in our secure datastore so you can resume coding sessions where you left off.
C. Payment Transaction Information
When you purchase Lifetime Access, we receive only non-sensitive transaction confirmation metadata from our payment gateways, including: Order ID, payment status (SUCCESS/FAILED), currency, amount paid, and timestamp.
Strict Payment Card Protection: Sensitive payment instrument details—such as full credit/debit card numbers, CVVs, card expiry dates, bank login credentials, and UPI PINs—are NEVER collected, received, or stored on Codevows servers. All payment transactions are handled directly through certified, PCI-DSS Level 1 compliant payment gateway partners (Cashfree Payments India Pvt. Ltd. and Stripe).
D. ATS Resume Builder Data
Information you type into our ATS Resume Builder (such as work history, project bullet points, or educational degrees) is rendered and converted into PDF format predominantly client-side in your own browser sandbox. We do not sell, scrape, or distribute your resume contents to corporate recruiters, headhunters, or advertising agencies.
3. Legal Bases for Data Processing
Under GDPR, DPDP Act 2023, and international privacy standards, we only process personal information where a valid legal ground exists:
- Performance of Contract: To grant your account digital lifetime access to courses, authenticate logins via OTP, and deliver paid curriculum services.
- Legitimate Interests: To secure our network, prevent unauthorized credential scraping, troubleshoot bugs, and improve educational tools.
- Legal Compliance: To comply with tax laws, financial auditing standards, and lawful governmental regulatory requests.
- Consent: Where you provide explicit permission (e.g., subscribing to optional notifications or requesting assistance).
4. Third-Party Infrastructure & Sub-Processors
We partner with select, enterprise-grade cloud service providers to power our platform. These providers are bound by strict contractual data processing agreements and may only handle your information in accordance with our instructions:
5. Cookies & Local Storage Practices
Codevows maintains a minimalist approach to cookies. We do not use third-party behavioral advertising cookies, cross-site trackers, or marketing surveillance pixels.
We utilize browser Local Storage and secure first-party session tokens solely for functional purposes: keeping you signed into your account after entering your OTP, remembering your account preferences, and storing code challenge drafts so your work is never lost upon browser refresh.
6. Data Retention & Account Deletion Policy
We retain your account email address and lifetime access entitlements for as long as your account remains active, ensuring you can return and access curriculum updates indefinitely.
You possess the absolute Right to be Forgotten. If you wish to permanently delete your Codevows account, progress history, and all associated personal records from our database, simply submit a deletion request from your registered email address to support@codevows.com. Your records will be irrevocably purged within thirty (30) days, except for transaction records required by financial and tax regulatory statutes.
7. Your Data Protection Rights (GDPR, CCPA & DPDP Act)
Depending on your geographic location, you enjoy robust privacy rights over your personal data:
- Right of Access: Request a copy of the personal information we hold concerning you.
- Right to Rectification: Request correction of inaccurate or incomplete email or profile data.
- Right to Erasure: Request permanent deletion of your account and personal records.
- Right to Restrict Processing: Request limits on how your personal data is utilized.
- Right to Data Portability: Request transmission of your personal data in a structured, machine-readable format.
- Non-Discrimination (CCPA): We will never discriminate against you, deny access, or charge varying rates for exercising your privacy rights.
To exercise any of these statutory rights, please email us at support@codevows.com. We respond to all verified privacy requests within 30 days without fee.
8. Protection of Minors (Children's Privacy)
Codevows is an engineering-oriented software education platform not aimed at children under the age of 13 (or under 16 in the EEA/UK). We do not knowingly collect or solicit personal information from minors without verifiable parental or guardian consent.
If we discover that a minor under the age of 13 has provided us with personal information without parental authorization, we will take immediate steps to delete such data from our records. If you believe a child has provided us with personal information, please notify us immediately at support@codevows.com.
9. Security Measures & Encryption Standards
We implement robust technical and organizational security controls designed to safeguard your personal data from unauthorized access, accidental loss, disclosure, or alteration:
- Enforced Transport Layer Security (TLS 1.3 / HTTPS) across all public endpoints and API traffic.
- Passwordless cryptographic OTP authorization to eliminate the risk of credential stuffing and reused password leaks.
- Role-based access controls and principle-of-least-privilege access to backend databases.
- DDoS mitigation and web application firewall (WAF) screening via Cloudflare.
10. Contact Us & Data Protection Grievance Officer
If you have questions, inquiries, complaints, or wish to exercise your rights under this Privacy Policy, please reach out directly to our designated Grievance Officer:
Designation: Grievance & Data Protection Officer
Email: support@codevows.com
Website: https://codevows.com
We review and acknowledge all grievance inquiries within 48 business hours and provide comprehensive resolutions within statutory time limits.