Privacy Policy

1. Overview & Scope

This Privacy Policy governs the manner in which CodexiLab ("we", "us", or "our"), founded and operated by Md. Sabbir Al Mamon and headquartered in Dhaka, Bangladesh, collects, uses, maintains, and discloses information collected from users ("User", "you") of the https://codexilab.com website, associated subdomains, proprietary digital products (including Z-ANI and NexBot), and related digital software consulting services.

CodexiLab is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, you can be assured that it will only be used in accordance with this privacy statement and applicable data protection regulations, including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

We adhere to strict data minimization principles. We do not harvest personal details without a clear, stated business purpose. We collect personal identification information from Users only through voluntary submissions and standard, automated infrastructure logging.

• Direct Contact Inquiries: When submitting an inquiry through our contact form, you provide your name, business email address, company name, and project scope details. This information is processed exclusively to evaluate and respond to your technical request.
• Infrastructure Telemetry & Server Logs: When accessing our servers, our edge networks automatically log standard network telemetry including your IP address, browser user-agent, operating system, referring URL, visited endpoints, timestamps, and HTTP response codes. This data is collected strictly for DDoS mitigation, intrusion detection, and uptime monitoring.
• Essential Cookies & Local Tokens: We utilize essential session tokens and security cookies (such as CSRF tokens) to ensure the integrity of form submissions and preserve user preferences across browsing sessions.

3. Google AdSense & Third-Party Advertising (Mandatory Policy Disclosure)

CodexiLab may partner with Google and other third-party advertising networks to display relevant advertisements across our technical blog and selected product pages. To ensure full transparency and compliance with Google's Required Privacy Policy Disclosures, we state the following:

• Third-Party Vendor Cookies: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites on the Internet.
• Advertising Cookies: Google's use of advertising cookies (such as the DoubleClick cookie) enables it and its partners to serve ads to our visitors based on their visit to CodexiLab and/or other sites across the World Wide Web.
• Personalized Advertising Opt-Out: Users may opt out of personalized advertising at any time by visiting Google's official Google Ads Settings.
• Consumer Choice Platforms: Alternatively, visitors can opt out of a third-party vendor's use of cookies for personalized advertising by visiting the Digital Advertising Alliance Consumer Choice Tool (aboutads.info) or the Network Advertising Initiative Opt-Out Page.

4. Web Analytics & Core Web Vitals Monitoring

We monitor aggregated website traffic metrics to optimize site performance, maintain sub-second page loads, and analyze reader engagement with our technical publications. These telemetry streams record aggregated data such as page load speed, Core Web Vitals (Largest Contentful Paint, Interaction to Next Paint, Cumulative Layout Shift), and browser device categories.

Analytical data is never correlated with personal identity or sold to marketing aggregators. We use this telemetry exclusively to refine our engineering content and user interface responsiveness.

5. How We Use Collected Information

CodexiLab processes collected data under the following legitimate business interests:

• Service Communication: To respond to exploratory project requests, deliver architectural proposals, and coordinate sprint deliverables.
• Security & Fraud Prevention: To protect our servers against malicious exploitation, brute-force attacks, SQL injection attempts, and unauthorized data scraping.
• Software Quality Assurance: To debug application errors, track broken hyperlinks, and improve mobile responsiveness.
• Zero Data Selling: CodexiLab does not sell, rent, monetize, or trade user data or inquiry records to third-party data brokers under any circumstances.

6. Data Storage, Encryption & Retention Lifecycles

All data transmission between your browser and our servers is secured using modern Transport Layer Security (TLS 1.3) encryption. Database records and configuration secrets are stored in secure cloud environments with role-based access restrictions and encrypted backups.

Inquiry submissions are retained only as long as necessary to facilitate ongoing business communication or comply with statutory accounting and legal obligations. When an inquiry record is no longer needed, it is permanently deleted from our primary databases and backup cycles.

7. User Rights Under GDPR, CCPA & Global Privacy Frameworks

Regardless of where you reside, CodexiLab respects your fundamental rights regarding your personal information:

• Right of Access: You may request a copy of the personal data we hold concerning your inquiries.
• Right to Rectification: You may ask us to correct or update inaccurate or incomplete information.
• Right to Erasure: You may request the permanent deletion of your personal data from our systems ("Right to be Forgotten").
• Right to Restrict or Object to Processing: You have the right to object to or limit how your information is processed.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
• To exercise any of these rights, contact us at contact@codexilab.com. We respond to verified requests within 30 business days without charge.

8. Children's Online Privacy Protection

CodexiLab's services, software products, and technical content are intended for businesses, software engineers, and adult professionals. We do not knowingly collect personal identifiable information from children under the age of 13 (or under 16 within the European Economic Area). If you believe a child has provided us with personal information, please notify us immediately at contact@codexilab.com so we can purge the record.

9. Policy Modifications & Direct Contact

CodexiLab may update this Privacy Policy from time to time to reflect operational changes, legal requirements, or new features. When updates occur, the updated policy will be published on this page with a revised effective date.

For any questions, legal concerns, or compliance audits regarding this Privacy Policy, please contact our privacy officer directly at contact@codexilab.com or write to: CodexiLab Studio, Attn: Privacy Office, Dhaka, Bangladesh.