PRIVACY & SECURITY

Privacy Policy

Welcome to Codelura. Your privacy and data security are our top priorities. This comprehensive Privacy Policy explains how we collect, use, protect, and manage your information across our entire platform.

Last Updated: July 31, 2026

Version: 2.0

Quick Navigation

→ 1. Information We Collect→ 2. How We Use Your Data→ 3. Projects & User Content→ 4. AI & Smart Discovery System→ 5. Data Sharing & Third-Party Services→ 6. Data Security Measures→ 7. Cookies & Tracking Technologies→ 8. Premium Services & Payments→ 9. Children & Minors Policy→ 10. Your Data Rights & Control→ 11. International Data Transfers→ 12. Data Retention & Deletion→ 13. Privacy Policy Updates→ 14. Contact & Privacy Inquiries

1. Information We Collect

We collect information to provide better services to students, developers, mentors, startups and businesses across our platform.

Personal Information

  • Full name, email address, and profile details
  • Phone number (optional for contact purposes)
  • College / organization / company details
  • Profile picture and bio information
  • Social media links and portfolios

Content & Activity Data

  • Projects uploaded to showcase and their metadata
  • Blog posts, comments, ratings and interactions
  • Hackathon participation and event registration details
  • Course progress and learning activity logs
  • Search queries and platform navigation patterns
  • File uploads and content classifications

Technical Data

  • IP address and geolocation data
  • Browser type, version, and device information
  • Operating system and hardware configuration
  • Cookies and session identifiers
  • Pages visited and time spent on each
  • Referral sources and exit pages
  • Performance metrics and crash reports

AI & Analytics Data

  • AI model usage patterns and input/output logs
  • Feature interaction data for recommendation systems
  • Performance analytics and feature popularity metrics
  • Aggregated engagement and behavior analysis

2. How We Use Your Data

Codelura uses collected data for the following purposes:

Core Services

  • Deliver learning materials and blog content
  • Enable project showcase visibility
  • Facilitate course access and progress tracking
  • Organize hackathons and startup events

Personalization

  • Power AI-based discovery system
  • Provide personalized recommendations
  • Customize user experience and preferences
  • Improve content recommendations

Platform Operations

  • Improve backend and frontend performance
  • Monitor platform stability and security
  • Prevent spam and platform abuse
  • Enforce terms of service and policies

Business & Support

  • Provide customer support and communications
  • Process payments for premium features
  • Send service updates and announcements
  • Conduct product research and analytics

3. Projects & User Content

Projects uploaded by users are subject to the following terms:

✓

Ownership Rights

You retain full ownership and intellectual property rights of your projects. Codelura does not claim any ownership or rights to your original content.

✓

Privacy Controls

You can mark projects as private, public, or restricted to specific users. Private projects are only accessible to you.

✓

AI Indexing

AI indexing may analyze metadata and tags for discovery purposes. Source code analysis is limited to public projects only.

✓

License & Attribution

Users must specify project licenses. Any reuse requires attribution and compliance with specified license terms.

✓

Removal & Deletion

You can delete your projects at any time. Deleted projects are permanently removed from the platform within 30 days.

4. AI & Smart Discovery System

Our platform includes AI-powered recommendation systems that enhance your experience on Codelura.

How AI Analysis Works

  • Analyzes engagement patterns and user preferences
  • Processes project tags, descriptions, and metadata
  • Tracks usage behavior to identify trending topics
  • Generates personalized project recommendations
  • Improves content discovery accuracy over time

Data Protection in AI Processing

  • AI training uses aggregated, anonymized data by default
  • Individual user data is not shared with AI training datasets
  • Projects marked as private are excluded from AI analysis
  • You can opt-out of AI recommendations at any time

Transparency & Control

  • AI decisions are explainable and auditable
  • You can request removal from AI recommendation systems
  • We comply with GDPR and AI transparency requirements
  • Regular audits ensure unbiased AI recommendations

5. Data Sharing & Third-Party Services

⚠️ We DO NOT sell user data to third parties.

Necessary Third-Party Services

  • Payment Processors: Stripe, Razorpay for secure payment processing
  • Cloud Infrastructure: AWS, Google Cloud for data hosting and backup
  • Analytics Tools: Mixpanel, Amplitude for anonymous usage analytics
  • Email Services: SendGrid for transactional emails and notifications
  • Security Services: Cloudflare for DDoS protection and security

Data Sharing Restrictions

  • Third parties are bound by strict data processing agreements
  • Data shared is limited to what's necessary for service delivery
  • Third parties cannot use your data for their own purposes
  • We do not share data with advertisers or marketing firms
  • Cross-border transfers comply with GDPR and relevant regulations

Legal Disclosures

We may disclose personal information when required by law:

  • In response to valid court orders or legal requests
  • To comply with government regulations and law enforcement
  • To protect against fraud, security threats, and criminal activity
  • To enforce our Terms of Service and protect user rights

6. Data Security Measures

We implement comprehensive security measures to protect your personal information:

✓ Encryption

  • SSL/TLS encryption for all data in transit
  • AES-256 encryption for data at rest
  • End-to-end encryption for sensitive data

✓ Authentication

  • Two-factor authentication (2FA) support
  • Secure password hashing (bcrypt)
  • OAuth 2.0 for third-party integrations

✓ Infrastructure

  • Role-based access control (RBAC)
  • Regular security audits and penetration testing
  • Firewalls and intrusion detection systems

✓ Compliance

  • GDPR and CCPA compliance
  • Data backup and disaster recovery
  • Incident response procedures in place

Note: While we strive to protect your information, no system is 100% secure. We cannot guarantee absolute security and encourage users to use strong passwords and enable 2FA.

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies

Required for basic functionality:

  • Authentication and session management
  • Security and fraud prevention
  • Basic platform functionality

Analytics Cookies

To understand how you use our platform:

  • Page views and user interaction tracking
  • Performance monitoring and optimization
  • Identifying trends and usage patterns

Preference Cookies

To remember your preferences:

  • Dark/light mode preferences
  • Language and region settings
  • Personalization preferences

Cookie Control

  • You can manage cookie preferences in settings
  • Browser settings allow you to block or delete cookies
  • Disabling cookies may affect platform functionality
  • We honor Do Not Track (DNT) browser signals

8. Premium Services & Payments

Information about our premium services and payment handling:

Payment Processing

  • Premium subscriptions and features are processed via PCI-DSS compliant payment gateways
  • We never store raw credit card details on our servers
  • Payment processors handle all sensitive financial information
  • Secure tokenization ensures safe recurring payments

Subscription Data

  • Billing address and invoice details
  • Subscription tier and active features
  • Renewal dates and payment history
  • Transaction logs for audit purposes

Billing & Refunds

  • You receive detailed billing statements via email
  • Subscriptions auto-renew unless cancelled
  • Refund requests are processed per our refund policy
  • You can manage subscriptions in account settings

9. Children & Minors Policy

Codelura is intended for users aged 13 and above.

For Users Under 18

  • Parental or guardian supervision is strongly recommended
  • We collect minimal personal information from minors
  • No marketing communications without parental consent
  • Minors can request data deletion at any time

For Parents & Guardians

  • We comply with COPPA (Children's Online Privacy Protection Act)
  • You can request to review your child's information
  • You can request deletion of your child's account
  • Contact us to manage your child's privacy settings

Safety Features

  • Content filtering for age-appropriate materials
  • Protection against cyberbullying and harassment
  • Parental controls available in account settings

10. Your Data Rights & Control

You have rights regarding your personal information. Here's what you can do:

📋

Access Your Data

Download a copy of all personal data associated with your account in a machine-readable format.

✏️

Correct Your Data

Update, modify, or correct inaccurate information in your profile at any time through account settings.

🗑️

Delete Your Data

Request permanent deletion of your account and all associated data. This action is irreversible.

🚫

Opt-Out

Withdraw consent for data processing, opt-out of marketing emails, and disable AI recommendations.

📤

Data Portability

Receive your data in a commonly-used, machine-readable format and transfer it to other services.

🔍

Transparency

Know how and why your data is being processed, and review all third parties with access to your information.

To exercise these rights, contact our privacy team at privacy@codelura.com with proof of identity. We'll respond within 30 days.

11. International Data Transfers

Our platform operates across multiple jurisdictions. Here's how we handle international data:

Data Transfers & Agreements

  • We implement Standard Contractual Clauses (SCCs) for EU-US data transfers
  • GDPR compliance ensured for European users
  • Data localization requirements are respected
  • Binding Corporate Rules (BCRs) for affiliated companies

Regional Compliance

  • GDPR (European Union)
  • CCPA (California, USA)
  • PIPEDA (Canada)
  • LGPD (Brazil)
  • India's Digital Personal Data Protection Act (DPDPA)

12. Data Retention & Deletion

We retain your data only as long as necessary to provide our services:

Retention Periods

  • Active Account: Data retained while account is active
  • After Deletion: Data deleted within 30 days (legal holds excepted)
  • Backups: Data retained in backups for 60 days
  • Legal Requirements: Longer retention if required by law

Account Deletion Process

  1. Request account deletion from account settings
  2. Confirm deletion via email verification
  3. All personal data deleted within 30 days
  4. Public projects archived (unless specifically requested for deletion)

13. Privacy Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements:

Updates & Notifications

  • Major changes will be announced at least 30 days in advance
  • We'll notify you via email for significant privacy changes
  • The "Last Updated" date appears at the top of this policy
  • Continued use of the platform indicates acceptance of changes

Your Options

  • Review changes before they take effect
  • Withdraw consent if you disagree with new terms
  • Request account deletion if unhappy with changes

14. Contact & Privacy Inquiries

Have questions about our privacy practices? Here's how to reach us:

Email

privacy@codelura.com

Response time: 48-72 hours

Support

support@codelura.com

For general inquiries

Mailing Address

Codelura Inc.
Tech Hub, Innovation District
Bangalore, India 560001

Phone

+91 812-345-6789

Mon-Fri: 10 AM - 6 PM IST

Data Protection Officer

If you have concerns about our data practices, you can reach our Data Protection Officer at dpo@codelura.com