Privacy Policy

1. Introduction

PandaCodeGen ("we," "us," or "our") operates pandacodegen.com and is the controller of personal information collected through this public website, its automated audit, and its inquiry forms. This notice explains how that information is handled when you visit the website, request an audit, submit an inquiry, or enable an optional service.

This notice is not used to manufacture consent. Optional analytics, advertising, scheduling, and chat services remain off until you make the relevant choice. Project-specific processing is also described in the signed engagement documents where applicable.

2. Information We Collect

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, company name, website URL, and business details when you fill out forms or contact us.
• Project Information: Details about your project requirements, budget, timeline, and current technology stack.
• Communication Data: Messages, files, and documents you send us through email, contact forms, or meetings.
• Payment Information: Billing details processed through secure third-party payment processors (we do not store credit card data).

2.2 Information Collected Automatically

• Usage Data: With analytics consent, pages visited, time spent, click patterns, browser information, and aggregate form milestones such as started, progressed, abandoned, errored, or completed. Form-field values are not included in these analytics events.
• Device Information: Device type, operating system, IP address, and browser type where needed to deliver the site, protect it, or provide a service you enable.
• Cookies and Similar Technologies: We use necessary preference storage and, only with the applicable choice, analytics, advertising, scheduling, chat, and approximate-location technologies.

2.3 Free Website Audit Tool Data

Our homepage provides a free website audit tool. When you submit a URL through this tool, we collect and process the following information for the purpose of providing the audit and tracking tool usage:

• The URL You Submit: We pass it to Google PageSpeed Insights and run bounded internal checks to return the automated result. Google and our hosting infrastructure process the request under their own service terms.
• Approximate Geographic Location: Country, region, and city may be read from Vercel request headers for abuse monitoring and, when you request an emailed summary, included in the internal notification. The application does not place the raw IP address in that message.
• Audit Results: The response can include lab scores, detected platform, web-vital diagnostics, and issue findings. These are point-in-time automated estimates.
• Email Address (Optional): If you ask us to email the automated summary, your email, submitted URL, result, and coarse location are sent through our email provider to deliver the confirmation and notify us of the request.

You can use the audit tool without leaving an email. Do not submit a private, confidential, or unauthorized URL. We do not create a database of partially completed forms or receive the values entered into an unfinished form; consented analytics records only aggregate milestone and field-identifier events.

3. How We Use Your Information

• To respond to your inquiries and provide customer support.
• To process contracts and deliver web development services.
• To send you project updates, proposals, and service-related communications.
• To improve our website functionality and user experience.
• To send marketing communications (with your consent).
• To comply with legal obligations and protect our legal rights.
• To detect and prevent fraud or security breaches.

4. How We Share Your Information

We do not sell, trade, or rent your personal information. We may share information in the following circumstances:

• Service Providers: Vendors that help us host the site, process email and payments, and deliver requested services.
• Optional Website Providers: When a provider is configured for the deployment and you allow its category, Google Analytics, Microsoft Clarity, and Vercel Web Analytics may provide analytics; Meta Pixel may provide advertising measurement; Cal.com may provide scheduling; and Tawk.to may provide chat.
• Legal Requirements: When required by law, court order, or government request.
• Business Transfers: In case of merger, acquisition, or sale of assets.
• With Your Consent: We will share information only with your explicit permission.

5. Data Security

We use reasonable technical and organizational safeguards appropriate to the website, including encrypted transport, access controls, bounded requests, origin checks, rate limits, dependency checks, and data minimization. No transmission or storage method is completely secure, and this statement is not a guarantee against every incident.

6. Your Rights and Choices

• Access: You can request a copy of your personal data.
• Correction: You can request that we update or correct inaccurate information.
• Deletion: You can request deletion of your data (subject to legal obligations).
• Opt-Out: You can unsubscribe from marketing emails at any time.
• Data Portability: You can request your data in a portable format.

To exercise these rights, contact us at info@pandacodegen.com.

7. Cookies and Tracking Technologies

Optional browser technologies are off by default. The first-visit banner lets you accept all, reject optional services, or choose analytics, advertising, and functional services separately. You can change or withdraw a choice at any time with the persistent Cookie settings control at the lower-left of the site. We remember the selection for up to 180 days.

The categories are:

• Necessary: Local storage that records and applies your privacy choice.
• Analytics: Google Analytics, Microsoft Clarity, and Vercel Web Analytics.
• Advertising: Meta Pixel.
• Functional: Cal.com scheduling and Tawk.to chat.

See our Cookie Policy for the current inventory, purposes, and retention details. Browser settings provide an additional way to delete or block storage, but are not the only control available.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites. We encourage you to review their privacy policies before providing personal information.

9. Data Retention

We keep inquiry and project information only for the period needed to respond, administer an engagement, secure the service, resolve disputes, and meet legal or accounting duties. We periodically review whether identifiable records are still needed. Email, hosting, analytics, and scheduling providers may retain data under their configured retention periods. You may request deletion; legal, security, backup, and contractual exceptions can apply.

10. International Data Transfers

Website and communication providers may process information in countries other than the one where you live. Where transfer safeguards are legally required, the responsible contracting entity must use the appropriate provider terms or transfer mechanism; providing an inquiry is not treated as blanket consent to waive those protections.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the revised policy and its effective date here and provide any additional notice the law requires. Where a new use requires consent, we will ask for that consent instead of relying on continued use of the website.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

14. GDPR Rights (EU/UK Users)

If EU or UK data-protection law applies to the processing, the potential lawful bases include:

• Contractual necessity: To deliver the web development services you have engaged us for.
• Legitimate interests: Fraud prevention, service security, responding to ordinary business inquiries, and essential operations, subject to the required balancing assessment.
• Consent: For optional analytics, marketing, scheduling, chat, and related browser storage where consent is the applicable basis.
• Legal obligation: Compliance with applicable laws and regulations.

As an EEA or UK resident, you have the following rights under GDPR:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Rights Related to Automated Decisions: We do not make solely automated decisions that significantly affect you.

To exercise these rights, contact us at info@pandacodegen.com. You also have the right to lodge a complaint with your local Data Protection Authority. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.