Privacy Policyسياسة الخصوصية

1. Who We Are

This policy explains what CodeForm collects, why, who else handles it, and what you can ask us to do with it. CodeForm is based in Iraq. The policy covers this website and all our services: Technology (apps, websites, and software), Research, Studio, AI, Suite, and Bundles. Kroslink has its own privacy policy, at kroslink.codeform.tech/privacy. It covers the Kroslink app, its website, and the accounts you connect to it.

2. Data We Collect

We collect only what we need to answer you and do the work. Almost all of it is what you give us:

• Contact details: your name, phone number, and email address.
• Your request: the service, the details you fill in on a request form, and your questions.
• Files you attach to a form: a reference file for Research, or a land plan, existing plans, a title deed, or reference images for Studio.
• What you send while we work together: messages, content, photos, logos, documents, and payment receipts, by email, phone, or WhatsApp.

We never collect card details. CodeForm does not run user accounts on this website, and the site has no analytics or advertising scripts.

3. What Each Service Needs

• Technology: a description of your app, website, or software, its features, and your timeline. To build and launch it, we may also need your content and access to accounts such as hosting, a domain, or an app store developer account. Section 8 covers the data inside a product we build or run for you.
• Bundles: your business name and the content your bundle lists, such as a menu, products, listings, photos, and prices. Registering a bundle's domain requires the registrant's contact details, which go to the domain registrar. A bundle with a system keeps its data, such as orders, bookings, listings, and patient records, on the system CodeForm runs for it (Section 8).
• Research: your topic and its details, the tier, language, length, and deadline, and any reference file you attach. Advanced work is checked on Turnitin, which means the text of the research is sent to Turnitin. We do not show your research or your name in our work.
• Studio: your plot's area, location, and frontages, the rooms and features you want, and any files you attach, which can include a title deed. Studio's engineers work from these details, including the licensed civil engineer who stamps your set.
• AI: joining the waitlist takes your email, and your name and what you would advertise if you give them. We use them to tell you about the launch and founder pricing. When the service launches, the brand materials you send will be used to make your ad, including in the AI tools that generate it, and this policy will be updated to cover that.
• Suite: the waitlist takes your email, and your name, the products you're interested in, and what you would use them for if you give them. We use them to email you about launches and early-access pricing. A tool suggestion takes your idea, and a name and contact if you give them. Kroslink's data is covered by its own policy (Section 1).

4. How We Use Your Data

Your data is used to answer your questions, prepare your quote, deliver your order, confirm payments, provide the support you chose, and improve our services. We email a waitlist only about the product you joined it for. We do not sell your personal data, and we do not use it for advertising.

5. Who Else Handles Your Data

We share your data only with the services that help us do the work, and only what each one needs:

• Netlify hosts this website and receives the forms and files you send through it.
• Google runs our email inbox (Gmail), where forms and emails arrive. The site also loads its fonts from Google Fonts (Section 10).
• WhatsApp carries the messages you send us there, and the confirmations and reminders a system we run sends your customers (Sections 6 and 8).
• Turnitin checks Advanced research.
• ZainCash and Al Rafidain Bank handle your payment (Section 7).
• Cloudflare hosts the sites we build and run, and Supabase stores the databases of the systems we run.
• Other hosting, database, and domain providers, and app stores, run the products we build for you.

Each of them handles data under its own privacy policy. We may also disclose data where the law requires it.

6. Messages and Calls

We use WhatsApp to follow up with customers who provided WhatsApp as their preferred contact method on a form. By using this channel you agree to WhatsApp's own privacy policy. We use WhatsApp only to answer questions and to receive, process, confirm, and follow up on orders. A booking or ordering system we run for a business sends its customers confirmations and reminders on WhatsApp, to the phone number they give when they book or order. You can also reach us by phone or email at any time. If you contact us on Instagram, Facebook, TikTok, or YouTube, that platform's own privacy policy applies.

7. Payments

You pay by ZainCash or Al Rafidain Bank transfer, directly with those providers, so your card details and bank login never reach us. To confirm a payment, we keep the receipt and transfer details you send, such as the name, amount, date, and transaction reference. We keep payment records for our accounts.

8. Products We Build or Run for You

The apps, websites, and software we build often hold data about your own customers or users. That data belongs to you, and you decide how it is used. We access it only to build, test, fix, update, back up, and secure the product, and we use it for nothing else.

• Managed Support: we keep access to the hosting, database, and domain accounts for as long as we run the product for you.
• Bundles: a bundle runs on a system CodeForm runs for many businesses, and each business's data is kept separate from every other's. We use your customers' details, such as names, phone numbers, orders, bookings, and patient records, only to run the system and send its messages. You can ask for an export at any time. When the service ends, you can ask for an export, and we then delete that data.
• Full Handover: the accounts and every project file transfer to you. Change their passwords once they do, and we no longer have access.

Don't send passwords through a form. When a project needs access to an account, we agree with you on a safer way to share it.

9. Our Work

CodeForm may show the work it delivers, such as screens, renders, and drawings, in its portfolio, with sensitive data redacted. That includes names, phone numbers, customer records, and plot and deed details. If your project must stay private, tell us before work begins. If it is already shown and you want it removed, contact us.

10. Cookies & Tracking

This site uses no third-party cookies or tracking scripts. The only data stored in your browser (via localStorage) is your theme and language preference, so they stay as you set them from page to page. They are not transmitted to any server. The site loads its fonts from Google Fonts, so your browser sends Google your IP address and basic browser details when a page loads. Netlify's servers receive the same details when you visit, as with any website.

11. Where It's Kept, and for How Long

Forms and files are kept in our Netlify account and our email inbox, and messages stay in WhatsApp and email. The data of a system we run is kept on Supabase, and the sites on Cloudflare, for as long as the service runs. Our providers may store data on servers outside Iraq. We keep your details for as long as we need them for your request, your project, and the support after it, and payment records for as long as our accounts require. A waitlist entry stays until you ask us to remove it.

12. Data Security

Pages and forms on this site are sent over an encrypted connection (HTTPS). Within CodeForm, only the team working on your request sees what you send. In a system we run, each business's data is kept separate from every other business's. No system is perfectly secure. If a breach affects your data, we will tell you.

13. Children

Our services are for adults. If you are under 18, ask a parent or guardian to contact us for you. If we learn that a minor sent us personal data without one, we will delete it.

14. Your Rights

To see the data we hold about you, get a copy, correct it, or delete it, contact us (Section 16). You can also ask to be removed from a waitlist at any time. We reply within 30 days. We may keep what the law or our payment records require, and if your project is still under way, deleting its details means we can't finish it. You can clear the locally stored theme and language preference at any time by clearing your browser's site data.

15. Changes to This Policy

CodeForm may update this policy at any time. The date at the top shows when it last changed. It will be updated to cover the AI service and new Suite products when they launch.

16. Contact

Privacy questions or requests: codeformtech@gmail.com, or 07731734548 by phone or WhatsApp.