Privacy Policy & Global Data Governance

1. Introduction & Entity Overview

Welcome to CodeYB Studio (trading as codeYB — Code Your Business, accessible at www.codeyb.com). We are dedicated to safeguarding client confidentiality, upholding strict intellectual property boundaries, and complying with modern statutory data privacy standards, including India's Digital Personal Data Protection (DPDP) Act 2023, the European Union's General Data Protection Regulation (GDPR), and relevant cross-border data protection frameworks.

This Privacy Policy applies to personal and technical data collected when you visit www.codeyb.com, submit requests for custom engineering services, participate in technical architectural reviews, or utilize our developer tools.

2. Categories of Information We Collect

We operate strictly under data minimization principles, collecting only information vital for technical evaluation and contractual delivery:

3. Lawful Basis & Purposes of Processing

We process your data strictly under the following lawful legal bases:

• Contractual Necessity: Generating statements of work (SOW), executing sprint milestones, issuing milestone escrow invoices, and deploying production codebases.
• Legitimate Business Interests: Maintaining platform stability, enforcing infrastructure security, defending against cyber threats, and verifying legitimate client identities.
• Explicit Consent: Sending technical engineering whitepapers, product updates, or architectural advisories when you voluntarily subscribe.
• Statutory Compliance: Satisfying statutory tax records, audit trails, and Indian corporate governance regulations.

4. Technical Security & Data Safeguards

codeYB implements enterprise-grade technical safeguards aligned with SOC-2 and ISO 27001 standards:

5. Subprocessors & Third-Party Services

codeYB NEVER sells, monetizes, or trades client data, business contacts, or proprietary source code to data brokers or third-party advertisers.

We engage only reputable, security-certified cloud infrastructure subprocessors under written data processing agreements:

6. Statutory User Rights (DPDP Act & GDPR)

Regardless of geographical location, codeYB guarantees the following rights to all data principals:

• Right to Access & Portability: Request confirmation of personal data processing and obtain a digital copy in machine-readable JSON format.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete personal data records.
• Right to Erasure ("Right to be Forgotten"): Request complete deletion of personal records where ongoing retention is not required by statutory financial or tax laws.
• Right to Withdraw Consent: Revoke consent for communications or marketing at any time with immediate effect.
• Right to Grievance Redressal: Direct formal privacy complaints to our designated Data Protection Officer with guaranteed resolution within 14 business days.

7. Cookies & Local Browser Storage

We utilize first-party cookies and browser local storage strictly for essential system operation—such as preserving dark/light theme choices, currency display, and consent state. For detailed information on our cookie classifications and how to adjust your preferences, visit our dedicated Cookie Policy.

8. Governing Law, Jurisdiction & Data Protection Officer

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of India. Any disputes arising hereunder shall be subject to the exclusive jurisdiction of the competent courts in Hyderabad, Telangana, India.