Privacy Policy

1. Who we are

Codemistry ("we", "our" or "us") is a web and app development agency in India. This policy explains what personal information we collect when you use codemistry.in or our services, why we collect it, who can see it and the choices you have. We follow India's Digital Personal Data Protection Act, 2023 and other applicable laws.

2. Information you give us

• Enquiries: your name, mobile number, email (optional) and message when you use the contact form or the enquiry pop-up.
• Quotation requests: the services, plans and features you select, your notes and your contact details.
• Your account: name, email, mobile number and password. Passwords are stored only in encrypted (hashed) form; we can never see them.
• Mobile verification: we send a one-time code (OTP) by SMS to confirm your number when you sign up or sign in with your mobile.
• Google sign-in: if you choose "Continue with Google", Google shares your name, email address and Google account ID with us. We never receive your Google password.
• Projects and support: requirements, messages and queries you share with us through your dashboard or by email, phone or WhatsApp.
• Developer applications: your contact details, experience, skills and the portfolio or GitHub links you provide.
• Chat assistant: messages you type into the website's chat assistant, which are stored on our servers.

3. Information collected automatically (website analytics)

We measure how our website is used with our own analytics system. The data is stored on our servers and is not shared with Google Analytics, advertising networks or any other analytics company. For each visit we record:

• the pages you view, how long you stay on each page and how far you scroll;
• where you came from (for example a search engine, a social network, another website or a campaign link);
• your device type, browser, operating system, screen size, language and time zone;
• your country, worked out from your IP address. We store the IP address only in shortened form (the last part is removed);
• key actions such as sending an enquiry or quotation request, signing in, or tapping our call or WhatsApp links;
• if you are signed in, which account the visit belongs to.

Automated bots are not recorded. We use this information only to understand which pages help visitors, fix problems and follow up on enquiries.

4. Advertising measurement (Meta Pixel)

We advertise on Facebook and Instagram. To measure those ads, our public pages use the Meta Pixel, a small piece of code from Meta Platforms. It tells Meta which pages you visit on our site and when you take a key action, such as sending an enquiry or a quotation request, creating an account or tapping our call or WhatsApp links.

When you fill in a form, the Pixel may also send your email address or phone number to Meta in hashed form (converted into a scrambled code in your browser, not readable text). Meta uses this to match the visit to a Facebook or Instagram account, to report which ads led to enquiries, and to show our ads to people who visited our site. Meta processes this data under its own privacy policy. You can control ads based on your activity in your Facebook or Instagram ad settings, or by blocking third-party cookies in your browser. The Pixel is not loaded in our admin area.

5. Cookies and browser storage

The Meta Pixel sets Meta cookies (such as _fbp) to recognise returning visitors for ad measurement. Apart from that, our website stores a few items in your browser's local storage: your sign-in session (so you stay logged in), a random visitor ID and visit ID used by our own analytics, and small preferences such as whether you have already seen the enquiry pop-up. You can clear these at any time from your browser settings; you will then be signed out. If you use Google sign-in, Google may set its own cookies under Google's privacy policy.

6. How we use your information

• To reply to your enquiries and quotation requests by phone, WhatsApp or email.
• To create and secure your account, verify your mobile number and keep your dashboard working.
• To plan, build, deliver and support your project, and to send quotes, payment requests and project updates.
• To review developer applications.
• To improve our website, services and content using the analytics described above.
• To prevent fraud and misuse, and to meet our legal obligations.

We do not use your information for automated decision-making, and we do not send marketing messages unless you ask us to.

7. Who we share it with

We never sell, rent or trade your personal information. We share it only where needed to run our services:

• Hosting provider: our website, database and email run on servers rented from our hosting company.
• SMS provider: receives your mobile number to deliver one-time verification codes.
• Google: only if you choose to sign in with Google.
• Meta (Facebook / Instagram): page visits, key actions and hashed contact details through the Meta Pixel, for ad measurement (see section 4).
• Developers on your project: the project details they need to do the work, under confidentiality.
• Authorities: when required by Indian law or a valid legal order.

If you contact us on WhatsApp, WhatsApp's own terms and privacy policy also apply to that conversation.

8. How long we keep it

We keep enquiries, quotation requests and account data for as long as they are needed to serve you and to keep proper business and tax records. Project records are kept for the duration of the project and our support period, and longer where the law requires. Analytics data is kept for as long as it is useful for improving the website. You can ask us to delete your data at any time (see section 10).

9. How we protect it

The website uses HTTPS encryption throughout. Passwords are hashed, mobile numbers are verified with one-time codes, the admin area is restricted to our team and protected with strong sign-in (including fingerprint / passkey login), and access to personal data is limited to people who need it. No system is perfectly secure, but we work to protect your information and will inform you and the authorities of a data breach as required by law.

10. Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to delete it, and withdraw any consent you have given;
• nominate another person to exercise these rights on your behalf;
• raise a complaint with us, and then with the Data Protection Board of India if you are not satisfied.

To use any of these rights, email support@codemistry.in from the email address on your account, or call us. We may ask you to confirm your identity first.

11. Children

Our services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has shared their data with us, please contact us and we will delete it.

12. Changes to this policy

We may update this policy when our website or services change. The latest version is always on this page, with the date at the top. If a change significantly affects how we use your data, we will let account holders know by email.