Privacy.

This page explains what personal information we collect through labs.codantrix.com, how we use it, and your choices. We're a small studio, so this is a short page in plain language.

1. Who we are

Codantrix Labs is an engineering studio registered with the Securities and Exchange Commission of Pakistan (SECP). The data controller is the studio itself. The contact for any privacy question is contact@codantrix.com.

2. What we collect

• Scope assistant conversations and leads. What you type into the assistant on /book, and any contact details you share there or through our follow-up form. Section 4 covers this in full.
• Field notes sign-ups. Your email address and a record of your consent. Section 3 covers this in full.
• Comments on writing posts. If you comment on a post under /writing, we store your name, your email address (never displayed), your comment, your country and your browser's user-agent string. We send one email to verify your address, and that verification lasts 90 days.
• Calendly bookings. Our scheduling page is hosted by Calendly. When you book a call we receive your name, email, time zone, and any answers you provide on Calendly's form. Calendly's own privacy policy applies to the booking flow itself.
• Email correspondence. If you email us, we keep that thread for as long as the engagement (or follow-up window) is active.
• Aggregated traffic data. Our hosting provider (Cloudflare) records standard server-side analytics: country, request count, response codes. No cookies, no fingerprinting, no third-party trackers.

3. Field notes emails

Field notes is our monthly email on shipping production agents. It is opt-in only: you get it because you asked for it, and never because you booked a call or talked to the assistant.

• What we store. Your email address, the page you signed up on, the times you signed up, confirmed and (if you do) unsubscribed, and your consent status: pending, confirmed or unsubscribed.
• Double opt-in. After you sign up we send you one confirmation email. Until you click its link your address stays pending, and we send you nothing else.
• One-click unsubscribe. Every Field notes email carries a one-click unsubscribe link. It takes effect straight away.
• Deletion on request. After you unsubscribe we keep your address marked as unsubscribed, only so we never email you again. To remove it entirely, email contact@codantrix.com and we will delete the record.
• Nothing else. We use your address only to send Field notes. We don't sell it, share it, or add it to any other list.

4. Leads: the scope assistant and the lead form

• Conversations. The scope assistant on /book stores your messages and its replies in a database we control, along with the page, your country (two letters, from Cloudflare), your browser's user-agent string and timestamps. A conversation ID is kept in your browser's local storage so a page refresh keeps the thread. Clear your site data to reset it.
• Model provider. To write each reply, the conversation text is sent to a third-party language-model provider.
• Lead details. If you give the assistant your email, or use the follow-up form, we store your email address, your name if you give it, a short note of what you need, and a link to the conversation.
• Calendar checks. If you ask about times, the assistant checks our Calendly availability and can create a one-time booking link for you.
• How we use it. Only to reply to you and follow up on that conversation. We do not add leads to Field notes; that list is opt-in only.
• Abuse protection. We use your IP address to rate-limit requests to the assistant and the forms.

5. What we do not collect

• No third-party cookies or marketing pixels.
• No client-side analytics SDKs.
• No retargeting or ad-network identifiers.
• No payment information on this domain. Payments happen by invoice, off-site.

6. How we use it

• To reply to your inquiry and run a scope call.
• To send follow-up emails directly tied to that conversation.
• To send Field notes, only if you signed up and confirmed.
• To keep records of engagements we've had: internal CRM, no third-party sharing.

We do not sell, rent, or trade personal information. We do not send marketing email to people who haven't asked for it.

7. Where data is stored

Our website and its small backend run on Cloudflare (Workers, D1, R2). Emails the site sends, such as confirmation and verification emails, go through our email delivery provider, Resend. Replies from the scope assistant are generated by a third-party language-model provider. Our own email runs on Google Workspace. Calendly handles its own data per its privacy policy. Files and notes related to engagements live on Google Workspace and a small set of standard SaaS tools (Notion, GitHub). All providers are well-known vendors with their own privacy and security commitments.

8. How long we keep it

• Inquiries and leads: up to 24 months from last contact, then deleted.
• Scope assistant conversations: 12 months from last activity, then deleted.
• Field notes: while you're subscribed. After you unsubscribe, only the unsubscribed record, until you ask us to delete it.
• Comment email verification: 90 days.
• Engagement data: as long as commercially or legally required (typically 7 years for tax purposes), then deleted.

9. Your rights

You can ask us, in writing, to:

• Tell you what data we hold about you.
• Correct anything that's wrong.
• Delete your data, subject to legal retention requirements.
• Stop emailing you. For Field notes, the unsubscribe link in any email does this at once.

Email contact@codantrix.com with the request. We aim to reply within 14 days.

10. Children

This site is not directed at children under 16. We do not knowingly collect data from anyone under that age.

11. Changes

If we change this policy we'll update the "effective" date at the top. Material changes will be flagged on the home page for at least 30 days. The 23 September 2026 update added sections 3 and 4, covering Field notes emails and leads from the scope assistant.

12. Contact

Anything privacy-related goes to contact@codantrix.com. We read every email.