Privacy Policy

Last updated: June 15, 2026

1. Information We Collect

When you create an account and use CodevBox Auth, we collect the following information:

• Account information: username, email address, and password (stored securely using industry-standard hashing).
• Profile picture: if you choose to upload one, it is stored in our secure cloud storage.
• Session data: authentication tokens and session identifiers necessary to maintain your login state.
• Usage data: basic logs such as login timestamps and IP addresses for security and debugging purposes.

2. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the CodevBox authentication service.
• Authenticate your identity and manage your sessions across connected services.
• Send security-related notifications, such as password reset links and multi-factor authentication codes.
• Detect and prevent unauthorized access, fraud, and abuse of our systems.

3. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your data may be shared only in the following circumstances:

• With connected CodevBox services that you have explicitly authenticated with via single sign-on.
• When required by law, regulation, or legal process.
• To protect the rights, property, or safety of CodevBox, our users, or the public.

4. Data Storage & Security

Your data is stored on secure servers with industry-standard encryption. Passwords are hashed using bcrypt and are never stored in plain text. Profile pictures are stored in encrypted cloud storage with restricted access.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5. Data Retention

We retain your account information for as long as your account is active. If you delete your account, your personal data will be removed from our active systems within 30 days. Profile pictures are deleted immediately upon account deletion.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your data in a portable format.
• Withdraw consent for data processing at any time.

7. Cookies & Local Storage

CodevBox uses browser local storage and session storage to maintain your authentication state and saved accounts. These are essential for the service to function and are not used for tracking or advertising purposes.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or through a notice on the service. Continued use of CodevBox after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy or your data, contact us at privacy@codevbox.com.