Contents
1 · Information we collect
- Project briefs. Through the form on our contact page: your name, email, company and role, your mobile number if you add one, what you want to build and the follow-up answers, budget, timeline, the brief itself, how you found us, and any website addresses you enter.
- The free site audit. If you ask for one, the website address is sent to Google PageSpeed Insights. If you attach the result, a summary of it is kept with your brief. While you type a website address, the form shows that site's icon, which your browser loads from Google's icon service.
- Chat. Messages you type into the chat assistant are sent to our hosting provider's AI service to write a reply. The conversation is kept in your browser so you can come back to it; we do not store it on our servers. If you choose to email us from the chat, we receive your email address, your name and note if you add them, the page you were on, and the conversation.
- Intro calls. Calls are booked through Cal.com, which receives what you enter there (such as your name, email and notes).
- AI agents acting for you. If an AI assistant sends us a brief or books a call on your behalf through our agent endpoints (MCP or A2A), we receive the same details plus the name of the agent.
- Technical data. With each brief and agent booking we store a one-way hash of your IP address (not the address itself) to limit spam and abuse. Our hosting provider keeps short-lived request logs (IP address, browser, referrer) for security and troubleshooting.
2 · How we use it
To reply to inquiries, scope projects, deliver work, send invoices, prevent abuse of this site, and (where you've separately agreed) maintain ongoing engagements. We do not use your data to train models, segment advertising, or build profiles, and we never sell it.
3 · Service providers
We share data only with the providers we need to run this site and our studio, each processing it under its own data processing terms:
- Cloudflare: hosting, our database, and the AI model behind the chat.
- Resend: sends this site's emails, such as new-brief notifications and chat receipts.
- Namecheap Private Email: our mailbox.
- Cal.com: intro-call booking.
- Google: Analytics (as described below), PageSpeed Insights for the free audit, and site icons in the contact form.
- Our accounting and invoicing tools, for clients.
We will disclose information when required by law.
4 · SMS messages
If you tick the optional SMS box on the contact form, we text the number you give about your inquiry, scheduled calls and project updates. We keep a record of your opt-in (the number, the time, and the wording you agreed to) as proof of consent. Reply STOP to any message to opt out, or HELP for help. Full details are in our SMS terms.
Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. The only exception is the messaging provider that delivers our texts, which processes your number solely to send them.
5 · Cookies, storage & analytics
This site uses first-party cookies for things you have explicitly opted into — for example, remembering your cookie choice. The chat keeps your conversations in your browser's local storage; clearing this site's data removes them. For measurement we use Google Analytics 4 (provided by Google LLC), which sets cookies and receives page views, device and browser information, approximate location, and referral source. We use it only to understand traffic at an aggregated level: no advertising profiles, no data selling, no third-party fingerprinting.
We run Google Consent Mode, so analytics and advertising storage start denied. If you are in a region that requires prior consent (the EEA, UK, Switzerland and similar), nothing is measured until you accept our cookie banner; we record which choice you made, when, and the version of the notice shown. Elsewhere, aggregated analytics runs by default and we honour applicable opt-out signals.
You can change or withdraw your choice at any time using the Cookie settings link in the footer — the change takes effect immediately. See Google's privacy policy for how Google processes this data.
6 · How long we keep it
- Project briefs and records of calls booked by AI agents, with their IP hashes, are deleted automatically 24 months after we receive them.
- Emails in our mailbox are kept as business correspondence for as long as we need them for the relationship and our legal and accounting obligations, and deleted on request when we don't.
- Analytics data is kept for the retention period set in our Google Analytics account, at most 14 months.
- Hosting request logs are short-lived and deleted automatically by our hosting provider.
- Data from client projects is governed by the engagement contract.
7 · Security
Data is encrypted in transit (TLS), and our database provider encrypts stored data at rest. Access is restricted to the team members who need it. We follow least-privilege principles for all third-party services. If a breach involving your data ever occurred, we'd notify you within 72 hours.
8 · Health & payment information
This site isn't built for health, medical or payment card information, and we don't take card payments here. Please don't send that kind of information through the contact form, the chat or email. If a project involves it, tell us in general terms and we'll agree how to handle it before any is shared.
9 · Your rights
Depending on jurisdiction (GDPR, CCPA, etc.), you may have the right to: access, correct, delete, or port your data, including briefs an AI agent sent for you; object to or restrict processing; withdraw consent. Email hello@codnit.com and we'll respond within 30 days.
10 · International transfers
Codnit is based in the United States, and our service providers process data in the US and elsewhere. For transfers from the EEA, UK or Switzerland we rely on Standard Contractual Clauses or the EU–US Data Privacy Framework, as offered by those providers.
11 · Children's privacy
Our services are not directed to anyone under 16. We do not knowingly collect data from children.
12 · Changes to this policy
If we materially change how we handle your data, we'll update this page and the "Last updated" date. For substantive changes affecting active clients, we'll email a notice.
13 · Contact
Questions about this policy or your data?
Email hello@codnit.com, or write to:
Codnit LLC, 5900 Balcones Dr #13712, Austin, TX 78731, United States.