Privacy Policy

1. Introduction

Code Junction ("we", "our", or "us") operates the Code Junction ERP software platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using Code Junction you consent to the collection and processing described here.

2. Information We Collect

Account & Contact Data: When you register we collect your name, email address, company name, phone number, and billing information.

Business Data: Data you enter into the platform — products, transactions, inventory, customers, suppliers — is stored on your behalf and belongs to you.

Usage Data: We collect logs, IP addresses, browser/device type, pages visited, and feature usage to improve the product.

Payment Data: All payment processing is handled by Paddle, our Merchant of Record. We do not store full card numbers. Refer to Paddle's Privacy Policy for payment data handling.

3. How We Use Your Information

• To provide, operate, and maintain the Code Junction platform
• To process transactions and send related billing communications
• To send product updates, security alerts, and support messages
• To monitor and analyse usage for product improvement
• To detect, prevent, and address technical issues or fraud
• To comply with applicable legal obligations

4. Data Storage & Security

Your data is stored on secure cloud infrastructure (PostgreSQL hosted on Aiven). We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and regular security audits. Access is restricted to authorised personnel only.

5. Multi-Tenancy & Data Isolation

Code Junction is a multi-tenant platform. Each tenant's data is logically isolated — no tenant can access another tenant's data. All queries are scoped by tenantId at the database level.

6. Sharing Your Information

We do not sell your personal data. We may share information with:

• Paddle — for subscription billing (Merchant of Record)
• Infrastructure providers — Aiven (database), Render (hosting), Vercel (website)
• Law enforcement — when required by applicable law

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Object to or restrict certain processing
• Data portability (export your data)

To exercise these rights, contact us at privacy@codejunction.io.

8. Data Retention

We retain your account and business data for the duration of your subscription and up to 90 days after cancellation (to allow recovery). After that, data is permanently deleted unless legally required to retain it longer.

9. Cookies

We use essential cookies for authentication (JWT session tokens) and preference storage. We do not use third-party advertising cookies. You can disable cookies in your browser, but some features may not function correctly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the service after changes constitutes acceptance.

11. Contact

Questions about this policy? Reach us at privacy@codejunction.io or via our contact page.