Privacy Policy

1. Introduction

CodeCrafters.ai (“CodeCrafters,” “we,” “us,” or “our”) operates as an AI-native product engineering studio providing bespoke software development, systems architecture, and technical consulting.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit codecraftersai.com, engage our engineering services, or communicate with us. We process personal data in strict compliance with the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA).

2. Information We Collect

We only collect data necessary to fulfill commercial inquiries and deliver high-standard engineering services:

• Direct Inquiries & Scoping Data: Name, work email address, telephone number, company name, project specifications, and budget ranges submitted via our contact forms or booking links.
• Automated Usage Data: Anonymized IP addresses, browser types, operating systems, referring URLs, and device telemetry collected via cookies and server logs.
• Spam Prevention Telemetry: Hardware and browser metadata processed via Cloudflare Turnstile to distinguish legitimate visitors from automated bot traffic without tracking user identities across the web.
• Client Engagement Records: Statements of work (SOWs), technical deliverables, communication logs, and invoicing records necessary to fulfill client contracts.

3. Legal Basis for Processing (GDPR Article 6)

We process personal data under the following legal frameworks:

• Contractual Necessity (Art. 6(1)(b)): To execute development agreements, issue proposals, and provide contracted software deliverables.
• Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent fraud, optimize performance, and follow up with commercial business leads.
• Legal Obligation (Art. 6(1)(c)): To comply with statutory tax, corporate accounting, and audit requirements.
• Consent (Art. 6(1)(a)): For non-essential tracking cookies or direct marketing communications, where explicit consent has been provided.

4. Sub-processors and Third-Party Services

We do not sell, rent, or trade your personal information. We share data only with trusted infrastructure and service providers bound by strict Data Processing Addendums (DPAs):

5. International Data Transfers

Where personal information is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are implemented in accordance with Chapter V of the GDPR, primarily through Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Retention

We retain inquiry data and project correspondence for up to twenty-four (24) months following last contact. Commercial contract documentation, invoices, and accounting records are retained for ten (10) years in accordance with applicable tax and corporate retention statutes.

7. Your Statutory Rights

Regardless of your location, you hold the following rights regarding your personal data:

• Access & Rectification: Request a copy of your stored records and correct inaccurate details.
• Erasure (“Right to be Forgotten”): Request full deletion of your personal data where retention is no longer legally required.
• Restriction & Objection: Object to processing based on legitimate interests or request processing limits.
• Data Portability: Receive your data in a structured, machine-readable format.
• CCPA / CPRA Disclosures: We do not sell personal data or share it for cross-context behavioral advertising. California residents may exercise their rights without discriminatory pricing or service degradation.

To exercise any of these rights, email your request to contact@codecraftersai.com. We respond within thirty (30) days.

8. Age Restriction

CodeCrafters.ai provides commercial B2B engineering services. Our website and services are not directed to individuals under eighteen (18) years of age.