← Back to Home

Privacy Policy

Last updated: January 2025

1. Introduction

Codexa ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment information vault service.

2. Information We Collect

2.1 Information You Provide

  • Account information (name, email address, company name)
  • Payment method details (bank account numbers, routing numbers, SWIFT codes)
  • Business information (company domain, verification documents)
  • Communication preferences and support inquiries

2.2 Automatically Collected Information

  • IP addresses and access logs
  • Device information and browser type
  • Usage data and analytics
  • Authentication logs and security events

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Service
  • Process and facilitate secure sharing of payment information
  • Send administrative communications and security alerts
  • Monitor and analyze usage patterns to improve the Service
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations and enforce our Terms of Service

4. Data Security

We implement robust security measures to protect your information:

  • AES-256 encryption for sensitive payment data at rest
  • TLS/SSL encryption for data in transit
  • Multi-factor authentication (MFA) for account access
  • Time-limited access tokens with automatic expiration
  • Comprehensive audit logging of all access attempts
  • Regular security assessments and penetration testing

5. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • With your consent: When you explicitly authorize sharing via access tokens
  • Service providers: Trusted third parties who assist in operating our Service (e.g., hosting, analytics)
  • Legal compliance: When required by law or to protect our rights
  • Business transfers: In connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Access tokens and temporary data are automatically deleted after expiration. Audit logs are retained for security and compliance purposes.

7. Your Rights

You have the right to:

  • Access and review your personal information
  • Correct inaccurate or incomplete data
  • Delete your account and associated data
  • Export your data in a portable format
  • Opt out of marketing communications
  • Object to certain data processing activities

To exercise these rights, contact us at [email protected].

8. Cookies and Tracking

We use cookies and similar technologies to maintain sessions, analyze usage, and improve the Service. You can control cookie settings through your browser, but disabling cookies may limit functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us: