PRIVACY POLICY.
Overview & Commitment
At Codsona Digital ("Codsona", "we", "our", or "us"), we are committed to respecting and protecting the privacy, confidentiality, and proprietary assets of our clients, partners, and website visitors.
This Privacy Policy outlines how we collect, handle, store, and safeguard personal information and enterprise technical data across our official domains (codsona.com, tharindunuwantha.me), our client intake forms, and all associated software engineering engagements.
Information We Collect
We only collect information that is strictly necessary to evaluate, scope, communicate, and deliver our digital engineering services:
- Client Contact Details: Name, business email address, phone/WhatsApp number, company name, and geographic location provided via our project intake forms or direct inquiries.
- Project Specifications & Scopes: Project goals, architectural preferences, estimated budget ranges, timeline constraints, and preliminary technical documentation shared during discovery.
- Technical Telemetry & Analytics: Anonymized browser type, operating system, page performance metrics, and general country-level location data collected solely to optimize site performance and responsiveness.
How We Use Your Data
We process collected data exclusively for valid business and contractual purposes:
Evaluating project requirements, preparing technical proposals, architectural diagrams, and Statements of Work (SOW).
Responding to technical inquiries, scheduling sprint reviews, and providing support throughout delivery cycles.
Executing non-disclosure agreements (NDAs), master service agreements (MSAs), and invoicing.
Protecting our infrastructure, databases, and client portals against unauthorized access, spam, or vulnerabilities.
Client IP & Strict Confidentiality (NDA)
As a software and digital engineering studio, we understand that client proprietary algorithms, codebase repositories, business workflows, and trade secrets demand the highest degree of protection.
- All proprietary project code, intellectual property, schemas, and assets developed for clients remain the exclusive property of the client upon agreed settlement.
- We readily execute bilateral Non-Disclosure Agreements (NDAs) prior to receiving confidential technical documentation or database credentials.
- Production secrets, API tokens, and deployment credentials provided by clients are kept in isolated, encrypted vaults with strict least-privilege access.
Data Protection & Infrastructure Security
We implement enterprise-grade technical and organizational measures to safeguard data against accidental loss, unauthorized access, alteration, or disclosure:
Your Rights & Inquiries
Regardless of your geographic location, you retain full control over the personal data you share with Codsona:
- →Right to Access: Request a copy of all personal records or project correspondence held in our systems.
- →Right to Rectification: Update or correct any contact information or business records.
- →Right to Erasure: Request permanent removal of your contact details and preliminary inquiry records where no active legal or accounting retention obligation exists.
Have questions regarding your data or NDA compliance?
Our engineering and security team is available to review custom NDA requirements, compliance assessments, or data erasure requests.