Privacy Policy

When you submit a project enquiry, we collect the information you provide: your name, email address, phone number, selected services, preferred timeframe, and any optional project details.

We may also collect information you provide when you email us directly or communicate with us about a potential or current engagement.

Our hosting and security providers may process technical information needed to deliver and protect the website, such as your IP address, request details, browser or device information, and security signals. The website stores your light or dark theme preference in your browser so it can remember your choice.

Portal information can include your name, email address, organisation membership, role, profile information, account and session records, configured websites, campaign inputs, keywords, generated articles, review decisions, publication results and relevant support or diagnostic records. Organisation administrators manage permitted users and website assignments. Authorised Codewell administrators may access relevant information for service administration, support and security.

Article inputs and associated material are sent to OpenAI for the generation functions you request. Only submit information you are authorised to provide; avoid sensitive personal information and unnecessary confidential material. Do not assume that generated output is accurate or that provider processing is confined to Australia. Provider retention and processing depend on the configured service and applicable provider terms.

GitHub connections involve identifiers, repository selections and authorisation credentials needed to publish to the repositories you permit. Selected article content is transmitted to GitHub and can become public through your website deployment. Revoking access does not automatically remove content already published.

Where paid subscriptions are enabled, Stripe processes payment details directly through its card components. Codewell does not receive or store full card numbers or CVC. We retain the billing profile, provider identifiers, subscription and invoice information, payment status and limited payment-method details required to administer billing. Paid-service availability and activation depend on the organisation’s configuration.

Facebook Page sharing is planned, not currently enabled. If introduced, connecting a Page will involve authorised account and Page identifiers, selected permissions, access credentials and posting outcomes. Enabled sharing will send article URLs and any configured post text to Meta; posts and link previews may be public. We will update this policy for the implemented connection and deletion processes before customer activation. We do not currently collect Facebook data through this planned integration.

The Portal uses necessary authentication and session mechanisms in addition to browser preferences. These are distinct from the marketing website’s theme storage. Hosting, email and security providers process information needed to operate the service; AWS supports Portal infrastructure and transactional email. Access to a particular provider is limited to the relevant service purpose.

The website is delivered through Cloudflare. Cloudflare Turnstile helps detect automated or abusive form submissions and may process technical and security information for that purpose. Valid enquiries are sent by email using Amazon Simple Email Service (Amazon SES).

The software engineering page for Perth includes an embedded Google Map. If you load that map, Google may receive technical information and apply its own privacy practices.

The current website does not use advertising trackers or analytics tracking. Codewell does not sell or rent personal information.

The website does not save enquiry details in a separate form-submission database. A valid submission is emailed to Codewell, and a confirmation copy is emailed to the address you provide. Operational logs record limited delivery outcomes and technical request information rather than the contents of your enquiry.

We retain correspondence and related business records only for as long as reasonably necessary for the purposes described in this policy, including managing enquiries, engagements, legal obligations, disputes, and security. When information is no longer required, we take reasonable steps to delete it or remove identifying details where appropriate.

Portal workspace records, billing records and integration information have different retention needs from enquiries. We retain them for service operation, security, accounting and applicable legal requirements. Contact us to request access, correction or deletion, or to discuss closing an organisation. We will verify authority and explain any information that must be retained. Removing a user, cancelling a subscription or revoking an integration is not the same as deleting all stored information. External providers and already-public content may require separate removal, and backup copies may persist until their normal lifecycle expires. Retention periods and technical deletion procedures remain subject to operational confirmation before this draft is adopted.

Your theme preference remains in your browser until you change it, clear your browser storage, or your browser removes it.

We disclose personal information only where reasonably necessary to operate the website, communicate with you, provide services, obtain professional advice, protect our systems or rights, or comply with the law. This may include disclosure to technology, email, hosting, security, and professional service providers.

Some providers operate global infrastructure. Personal information may therefore be processed in Australia, the United States, or other countries where those providers operate. We consider appropriate contractual and security safeguards where applicable, while remaining responsible for our own legal obligations. Overseas recipient countries and actual provider retention settings must be confirmed before this draft is adopted; this statement is not consent to waive privacy rights.

You may ask to access or correct personal information we hold about you, request deletion, or raise a privacy question or complaint, by emailing hello@codewell.com.au. Please provide enough detail for us to understand and respond to your request. We may need to verify your identity before providing access or making a correction.

We will consider your request or complaint and respond within a reasonable time. If Australian privacy law gives you the right to take a complaint further, you may also contact the Office of the Australian Information Commissioner.