Privacy policy
Effective October 8, 2026. Kodigo.
Template text. Have it reviewed for your business and location before you publish.
Kodigo (“we”, “us”) runs this website and the template previews linked from it. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights and choices you have. It is written for visitors and clients in the United States and the other countries we serve.
In short
- We collect only what you type into our enquiry form or the chat assistant, plus basic technical logs. Nothing is collected from the template demos.
- We never sell your information or share it for advertising. Analytics runs only if you click Accept, and we honor the Global Privacy Control signal.
- Your information is seen by Kodigo and the few service providers that host the site, deliver email and block spam.
- Enquiries that go nowhere are deleted within 12 months. You can ask to see, correct or delete your information at any time.
- Questions or requests go to the email at the bottom of this page. We reply within 45 days, usually much sooner.
1.Who we are
Kodigo is a web studio operating from the Philippines and serving businesses in the United States and elsewhere. We are the controller of the personal information described here. Contact: hello@example.com.
2.What we collect, from where, and why
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Contact details | Name, work email, business name, website | You, when you send an enquiry | Reply to you and scope your project |
| Enquiry details | Industry, services wanted, your message | You, when you send an enquiry | Prepare a relevant proposal |
| Client records | Billing details, signed proposals, site content you give us | You, during a project or membership | Deliver, bill and support the work |
| Technical data | IP address, browser type, pages requested, referring page | Automatically, by our hosting provider | Security, abuse prevention, keeping the site working |
| Usage data | Aggregate page-view counts, no identifiers | Optional analytics, only after you accept | Understand which pages are useful |
| Preferences | Your cookie choice (one word, stored in your browser) | You, in the cookie banner | Remember your choice |
We do not collect sensitive information such as government IDs, health details or payment card numbers through this website. Card payments, when they happen, go directly to a payment processor and we see only the confirmation.
The template demos shown on this site are separate websites. Anything typed into a demo form is not sent to anyone and is not stored.
This site is for businesses. We do not knowingly collect information from children under 13, and we delete it if we learn we have.
3.The chat assistant
The chat button on this site is an AI assistant that answers questions about Kodigo. Your messages are sent to our AI model provider (currently Alibaba Cloud’s Qwen service, international region) to generate each reply, under API terms that do not use your messages to train its models. We do not store the conversation on our servers; it stays in your browser tab until you close it.
Please do not share passwords, payment details, health information or other sensitive data in the chat. If you want a person to follow up, use the enquiry form instead.
4.Legal bases (where they apply)
- Contract: replying to your enquiry and delivering the services you buy.
- Legitimate interests: keeping the site secure, preventing abuse, and improving it based on aggregate use.
- Consent: optional analytics. You can withdraw it any time with Cookie settings in the footer.
- Legal obligation: keeping tax and accounting records.
6.Who we share it with
We do not sell personal information and we do not share it for cross-context behavioral advertising. We share it only with service providers who help us run the site and deliver our work, under contracts that limit what they can do with it:
| Provider | What they do for us | What they see |
|---|---|---|
| Vercel | Hosts the site and its forms | Technical logs, form submissions in transit |
| Resend | Delivers enquiry and client email | Your name, email and message |
| Cloudflare Turnstile | Blocks spam on forms | Technical signals from your browser |
| Alibaba Cloud (Qwen) | Generates the chat assistant’s replies | The messages you type into the chat |
| Payment processor | Takes payments when you buy | Billing details; named at checkout |
We may also disclose information when the law requires it, to protect our rights or our clients, or as part of a sale or merger of the business, in which case this policy continues to apply.
7.Where it is processed
Your information may be processed in the United States, the Philippines, Singapore (the chat assistant’s model provider) and the other countries where our service providers run their infrastructure. Where the law requires it (for example for people in the EU or UK), we rely on standard contractual clauses or equivalent protections for these transfers.
8.How long we keep it
- Enquiries that do not become projects: deleted within 12 months.
- Client records: kept for the length of our work together, then for the period tax and accounting law requires (typically up to seven years), then deleted or anonymized.
- Technical logs: kept by our hosting provider for a short rolling period, then deleted.
- Your cookie choice: stays in your browser until you clear it or change it.
9.Your rights in the United States
If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon, Utah or another state with a comprehensive privacy law, you have the right to:
- Know what personal information we hold about you and receive a copy.
- Correct information that is inaccurate.
- Delete your information, subject to legal exceptions such as records we must keep.
- Opt out of sale, sharing or targeted advertising. We do none of these, so there is nothing to opt out of.
- Not be treated differently for exercising these rights.
California notice at collection: in the last 12 months we collected the categories in section 2, for the purposes listed there, and disclosed them only to the service providers in section 5. We do not sell or share personal information and have no actual knowledge of selling the information of anyone under 16.
How to exercise a right: email hello@example.com with the subject line “Privacy request”. We verify requests by replying to the email address we have on file, and respond within 45 days (extendable once by 45 days where the law allows, and we will tell you if so). You may use an authorized agent; we will ask for proof of their authority. If we decline a request, you may appeal by replying to our decision and we will answer within 45 days.
10.Your rights under Philippine law
Because Kodigo operates from the Philippines, we handle personal information in line with the Data Privacy Act of 2012 (Republic Act No. 10173) wherever you are. You have the right to be informed, to access, to object, to correct, to erasure or blocking, to data portability, and to claim damages, and you may file a complaint with the National Privacy Commission. Contact us at the email below first and we will try to resolve it.
11.Your rights in the EU, UK and elsewhere
If the GDPR or UK GDPR applies to you, you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. You may also complain to your local supervisory authority. Contact us at the email below and we will respond within one month.
12.Security
The site is served over HTTPS with modern security headers. Forms are validated on the server, rate limited and protected against spam. Access to client information inside Kodigo is limited to the people working on your project. No method of transmission or storage is perfectly secure, so we also keep what we collect to a minimum.
13.Changes to this policy
We will post changes on this page with a new effective date. For material changes we will also tell active clients by email before they take effect.
14.Contact
Kodigo, hello@example.com. See also the cookie policy, the terms of service and the accessibility statement.