Privacy policy

Contact form data

When you send the contact form we receive: your name, your email address if you gave one, your phone number, your preferred contact method, the service you need, and your message.

It is sent by email, at the moment you press send, to a single inbox of ours. If it cannot be sent at that moment, it is kept in the site's database, on Cloudflare, until one of us has dealt with it by hand, and then your details are erased from it. It is not sold, and not shared with anyone for marketing.

Two companies handle it on the way, to deliver it and for nothing else: Cloudflare, which hosts the site, and Resend, which delivers the email to our inbox.

We use it for one thing: to reply to you — normally within 24 hours on working days.

Your IP address is held in the memory of the program that receives the form for ten minutes only, to stop the form being submitted repeatedly from one device. It is not stored anywhere else and is not attached to your message.

Cookies

The site uses three functional cookies and no advertising or tracking cookies at all: one remembers the language you chose, one the light or dark appearance, one decides which workspace a signed-in customer opens. Subscribers' session keys are kept in the browser's local storage, not in a cookie.

There is no analytics tool and no advertising pixel on the site. The site does measure its own speed: when you leave a page, your browser sends how long it took to appear and to respond, with the page's address, its language, the screen width and the connection type your browser reports, and nothing that identifies you or your device: no IP address, no cookie, no identifier. Those figures are kept, anonymous, in the site's database.

The site's Content-Security-Policy blocks requests to any other origin, so even an analytics tool added by mistake would be refused. The one exception is the connection-error reports that Cloudflare, the site's host, asks browsers to send when a connection fails.

Platform customer data

If you subscribe to the Coderah Tech platform, the system holds the conversations, contacts, templates, wallet movements and invoices belonging to your workspace.

Isolation between customers is enforced inside the database itself with row-level security rather than in application code — the application role cannot read a row belonging to another workspace even if it tries.

Some data must pass through others for the service to work: Meta (WhatsApp) to deliver messages, and the payment providers to top up the wallet. Each receives only what that purpose requires.

Your rights

You can ask for a copy of your data, for it to be corrected, or for it to be deleted. Platform customers can export contacts to CSV from the console at any time without asking anyone, and a copy of the conversations is sent on request.

For any of these, call 01000025860 or use the contact form.

Changes to this policy

If we change anything, the last-updated date above changes with it. No change applies retroactively to data collected before it.