Privacy Policy
Last Updated: June 30, 2026
Welcome to CodeWays ("we", "us", or "our"). We build high-performing web platforms and automate business marketing operations. We respect your privacy and are committed to protecting the personal data and integration credentials you share with us.
1. Information We Collect
We collect information to provide better services to our clients and run our platform operations. This includes:
- Contact and Profile Details: When you enquire on our site or submit a project brief, we collect your name, email address, phone number (or WhatsApp number), business/domain name, and onboarding briefs.
- Billing Information: Payments for our month-to-month plans are processed securely via third-party gateways (such as Stripe, PayFast, and Yoco). We do not store or process credit card numbers directly on our systems.
- Device and Usage Information: We collect anonymized logs of your browser details, IP address, page views, and traffic sources using secure performance tracking systems.
2. Google API Services & OAuth Disclosures
RequiredOur automation dashboard (such as the Google Ads Auto-Pilot engine) connects directly to Google services. If you choose to link your accounts, we access campaign details and analytics metrics via secure OAuth tokens.
CodeWays' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Google Ads API: We scan your daily search terms performance, cost per click, and impressions. Our AI agent parses this query data to identify negative keywords (toxic or non-B2B intent queries) and pushes negative keyword lists back to your ad campaigns to prevent budget waste.
- Google Search Console API: We retrieve organic search performance data (clicks, impressions, position) and index status to present SEO performance audits on your dashboard.
Your OAuth credentials (tokens) are stored fully encrypted in our Cloudflare databases. We do not share, sell, or transfer your Google API data, credentials, or metrics to third-party ad networks, data brokers, or external agencies. It is used solely to perform optimization routines for your connected account.
You can disconnect CodeWays and revoke access tokens at any time through your Google Security Permissions Console.
3. Meta Platform & Social Media Integration Data
As part of our website building and management services, we may access and display content from your social media accounts — including Facebook, Instagram, and Threads — on your CodeWays-built website. This is done exclusively at your request and with your explicit authorization through Meta's official OAuth consent flow.
- Public profile information (name, profile picture, page name)
- Published posts, photos, and videos from your connected social media accounts
- Basic engagement metrics (likes, comments) for display purposes only
- To embed and display your social media feed on your CodeWays-built website
- We do NOT use this data for advertising, profiling, or selling to third parties
- We do NOT store your social media content permanently — feeds are fetched in real-time or cached temporarily for performance
- Social media access tokens are stored securely and encrypted on our Cloudflare infrastructure for as long as the integration is active
- Cached social media content is refreshed regularly and not retained beyond 7 days
- When you disconnect the integration or cancel your subscription, all stored tokens and cached data are deleted within 30 days
Your Meta Platform tokens are stored fully encrypted in our Cloudflare databases. We never sell, rent, or share your social media data or credentials with any third party. CodeWays' use of data received from Meta APIs adheres to the Meta Platform Terms and Meta Developer Policies.
You can disconnect CodeWays and revoke access to your social media accounts at any time through your Meta Account Settings → Apps and Websites. You may also request deletion of all social media data we hold by emailing [email protected] or visiting our Data Deletion Instructions page. Upon receiving a deletion request, we will remove all associated data within 30 days and confirm completion via email.
4. How We Use Data
We use the data we collect to support our business functions:
- To build, publish, and maintain your business websites.
- To process monthly subscription fees and maintain accounting.
- To provide direct text-support and onboarding communication.
- To monitor website security, performance, and uptime.
5. Cookies
We use session and analytics cookies to secure the dashboard and track site performance. You can disable cookies in your browser settings, though doing so may prevent certain interactive features of the admin panel from loading.
6. Data Retention
We retain different categories of data for different periods:
- Contact & profile data (name, email, phone): Retained for the duration of your subscription and for 12 months after account closure, unless you request earlier deletion.
- Billing records: Retained as required by applicable tax and financial regulations (typically 5–7 years).
- Google API tokens: Retained while the integration is active. Deleted within 30 days of disconnection.
- Meta Platform tokens & cached social data: Retained while the integration is active. Cached content expires after 7 days. All data deleted within 30 days of disconnection or cancellation.
- Usage & analytics data: Anonymized and aggregated data may be retained indefinitely for performance monitoring.
7. Your Privacy Rights & Data Deletion
Depending on your location, you may have rights under the Protection of Personal Information Act (POPIA) in South Africa, General Data Protection Regulation (GDPR) in Europe, or other regional regulations. This includes the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your personal data
- Restrict or object to certain processing of your data
- Data portability — receive your data in a structured, machine-readable format
To submit a data access, correction, or deletion request, email [email protected] with the subject line "Data Request". We will respond within 30 days. For Meta Platform data specifically, you can also visit our Data Deletion Instructions page.
8. Contact
If you have any questions or concerns regarding our privacy practices, contact us at:
- Email: [email protected]
- Support Portal: https://codeways.co/contact