Privacy Policy

1. Introduction

Welcome to CoSpace. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we look after your personal data when you visit our website and tells you about your privacy rights and how the law protects you.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you, limited to the following exhaustive list:

• Identity Data: This is limited to your chosen display name.
• Contact Data: This is limited to your email address.
• Content Data: Includes the text, tasks, and data you input into your workspaces. We claim no ownership over this data, and it is never used to train artificial intelligence models without your explicit, opt-in consent.
• Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location.
• Usage Data: Includes information about how you use our website and services (tasks, habits, and workspaces).

3. How We Use Your Data

We will strictly use your personal data only for the following purposes:

• To register you as a new user.
• To process and deliver the Service to you, including managing your tasks and habits.
• To manage our relationship with you, including sending verification emails (OTP) and notifications.
• To improve our website, products/services, marketing or customer relationships.

4. Third-Party Services

We use verified third-party processors for hosting, database management (Supabase), transactional emails (Resend), and analytics. We only share the minimum data necessary for these services to function. We do not sell your data to data brokers.

5. Data Retention

We retain your personal and workspace data only for as long as your account is active. If you delete your account, your Content Data and Identity Data are permanently deleted from our active servers within 30 days.

6. Cookies and Tracking

We use strictly necessary cookies and similar technologies solely for essential functions, such as keeping you securely logged in (e.g., Supabase auth tokens).

7. Children's Privacy

Our Service is not intended for anyone under the age of 13. We do not knowingly collect personal data from children.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is limited to employees, agents, contractors, and other third parties who have a business need to know.

9. Your Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. You have the right to request access to your personal data, request correction, request erasure, or object to processing. To exercise these rights, please contact us at contact@codealgo.live. We will respond to all data requests within 30 days.