Privacy Policy

Codeways LLC ("we", "us", or "our") operates Codeways Services, a service management platform for hosting and maintenance services. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using our platform, you agree to the collection and use of information in accordance with this policy.

Account information: When you register or sign in — including via Google OAuth — we receive your name, email address, and profile picture from your identity provider. We do not receive or store your Google password.

Google user data: If you sign in with Google, we access only your basic profile (name, email address, and profile photo) to create and identify your account. We do not access your Gmail, Google Drive, Calendar, or any other Google services.

Billing information: Payment details (credit card numbers) are processed directly by Stripe and are never stored on our servers. We store billing records, invoice history, and transaction references.

Service usage data: We collect information about how you interact with the platform, including pages visited, actions taken, and support tickets submitted.

Technical data: IP address, browser type, device type, and access timestamps, collected automatically for security and analytics purposes.

• To provide, operate, and maintain the Codeways Services platform
• To authenticate your identity and manage your account
• To process billing, generate invoices, and manage subscriptions
• To send transactional emails (invoices, ticket updates, payment confirmations)
• To provide customer support and respond to your requests
• To detect, prevent, and investigate security incidents or fraud
• To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: we use Google sign-in data only to authenticate users and populate their account profile (name and email). We do not transfer your Google data to third parties, do not use it for advertising, and do not allow humans to read your Google data except for security purposes or when required by law.

We use the following trusted third-party services to operate the platform:

• Appwrite — authentication and database hosting
• Stripe — payment processing
• DigitalOcean — cloud infrastructure monitoring
• Resend — transactional email delivery

Each provider has their own privacy policy governing their handling of data.

We retain your account data for as long as your account is active. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain certain records (e.g. billing records for tax purposes).

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a machine-readable export of your data
• Objection: Object to certain processing activities

To exercise any of these rights, contact us at info@codeways.lk.

We use strictly necessary session cookies to keep you signed in. We do not use advertising cookies or cross-site tracking cookies. You can control cookies through your browser settings, though disabling session cookies will prevent you from signing in.

We implement industry-standard security measures including encrypted connections (TLS), hashed credentials, and access controls. However, no method of internet transmission is 100% secure and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice in the platform. Continued use of the service after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact: