Privacy Policy.

1. Introduction

CodeLixi ("CodeLixi", "we", "us", or "our") respects your privacy and is committed to explaining how personal information is collected, used, disclosed, and protected.

CodeLixi provides business systems engineering services, including business process analysis, workflow redesign, software and technology solutions, and AI-powered business systems.

This Privacy Policy applies to information collected through our website, contact forms, careers-related communications, business development activities, and other interactions with CodeLixi.

This Policy does not automatically govern information processed on behalf of a client through a separately contracted project. Such processing may be governed by the applicable client agreement, statement of work, data processing agreement, or other written terms.

2. Personal Information We May Collect

The information we collect depends on how you interact with CodeLixi.

2.1 Information You Provide Directly

We may collect:

• Contact information: name, business email address, telephone number, company name, and job title.
• Inquiry information: messages, questions, project requirements, and other information submitted through our contact forms or sent to us directly.
• Careers information: information included in applications, resumes, CVs, portfolios, employment history, qualifications, and related communications.
• Newsletter information: email address and subscription preferences, if you subscribe to our newsletter.
• Business communication information: information shared during calls, email exchanges, meetings, and other business interactions.

Please avoid submitting sensitive personal information, confidential third-party information, or regulated data through general website forms unless CodeLixi has specifically requested it through an appropriate, approved process.

2.2 Information Collected Automatically

When you visit our website, certain technical information may be processed by our website infrastructure or hosting providers, depending on their configuration. This may include:

• IP address;
• browser and device information;
• operating system;
• pages or resources requested;
• request timestamps;
• referring website information; and
• technical diagnostic or security information.

The precise information collected depends on the hosting environment, server configuration, and security services in use.

Our application source-code review did not identify custom first-party cookies, browser local storage, session storage, Google Analytics, or Meta Pixel implementation. This does not establish that every infrastructure or hosting-level technology is cookie-free. The live hosting configuration must be verified separately.

2.3 Information From Business and Public Sources

For business-to-business research and outreach, we may obtain professional or business contact information from sources such as:

• publicly available company websites;
• professional profiles;
• business directories;
• government or public business records;
• industry publications;
• company announcements and press releases; and
• professional or industry association directories.

We use this information for legitimate business research, identifying relevant organizations and decision-makers, and communicating about potentially relevant services.

3. How We Use Personal Information

We may use personal information for the following purposes:

• Responding to inquiries: answering questions and following up on submitted requests.
• Business development: identifying relevant organizations and communicating about CodeLixi services.
• Service delivery: evaluating requirements and managing client-related communications.
• Recruitment: reviewing applications and communicating with candidates.
• Newsletter communications: sending updates to individuals who subscribe.
• Website operations: maintaining, troubleshooting, and improving website functionality.
• Security: detecting abuse, spam, suspicious activity, and unauthorized access.
• Legal compliance: meeting applicable legal obligations and responding to lawful requests.

We will not use personal information for purposes materially different from those described here without providing additional notice where required by law.

4. Contact Forms and Website Submissions

When you submit an inquiry through our website, the information you provide is transmitted to our server for processing. Our contact form currently uses a server-side endpoint to process submissions. The implementation includes a honeypot anti-spam field and basic rate-limiting measures.

Contact notifications are delivered through Resend, our email delivery provider. Inquiry information is also stored in CodeLixi's internal customer relationship management (CRM) system so that we can manage and follow up on requests.

Please do not use general contact forms to transmit payment card details, passwords, government identification numbers, medical records, or other highly sensitive information.

Submitting a contact form does not automatically create a client relationship, service agreement, or confidentiality agreement.

5. Cookies, Analytics, and Similar Technologies

5.1 Current Website Implementation

Based on the application source-code review available as of this Policy's preparation:

• No custom application cookies were identified.
• No application use of browser local storage or session storage was identified.
• No Google Analytics implementation was identified.
• No Meta Pixel implementation was identified.
• No cookie consent banner or stored consent preference was identified.
• No in-site cookie settings or withdrawal control was identified.

Our website infrastructure or hosting provider may use technical mechanisms necessary for security, traffic management, delivery, or website operation. These must be assessed against the actual live deployment and provider configuration.

5.2 Future Analytics or Advertising Technologies

If CodeLixi introduces analytics, advertising pixels, marketing technologies, or other non-essential tracking technologies, we will update this Policy as appropriate and implement any consent or opt-out mechanisms required by applicable law before using technologies that require them.

We will not describe a planned technology as active until it has actually been deployed.

5.3 Browser Controls

You may be able to manage or delete cookies through your browser settings. Blocking certain cookies or technical storage mechanisms may affect website functionality. Browser-level controls are separate from any privacy choices or controls provided directly by CodeLixi.

5.4 Global Privacy Control

Our current application source-code review did not identify implementation of Global Privacy Control (GPC) signal handling. We therefore do not claim that the website currently recognizes or processes GPC signals. If this functionality is implemented, this Policy will be updated accordingly.

For more information about cookie-related technologies, please read our Cookie Notice.

6. Business Communications and Outreach

CodeLixi may communicate with business owners, executives, decision-makers, and other professional contacts about its services. These communications may include business emails, telephone calls, and responses to inquiries.

We may use professional contact information obtained from publicly available business sources and information provided directly by the individual or their organization.

We use business communication information to:

• introduce relevant CodeLixi services;
• respond to business inquiries;
• conduct professional follow-ups;
• manage business relationships; and
• maintain records of communication preferences and requests.

6.1 Opt-Out and Communication Preferences

If you do not want to receive further marketing or business development emails from CodeLixi, you may request that we stop by using an available unsubscribe mechanism or contactingsales@codelixi.com. We will process applicable opt-out requests and maintain suppression records where reasonably necessary to respect those requests and comply with applicable law.

If you request that we stop contacting you by telephone, we will record and respect that request in accordance with applicable requirements.

An opt-out from marketing communications does not necessarily prevent operational, transactional, legal, or service-related communications where those communications are appropriate and permitted.

6.2 Telephone Communications

CodeLixi may use information relating to business calls to manage professional communications and follow-ups. CodeLixi does not currently record business calls, based on the information provided for this Policy's preparation.

Telephone outreach practices, including calling methods, calling hours, do-not-call screening, and applicable consent requirements, must comply with the laws governing the recipient and the communication.

7. Careers and Recruitment

If you apply for a position or opportunity with CodeLixi, we may collect information such as:

• name and contact details;
• CV or resume;
• employment history;
• education and qualifications;
• skills and professional experience;
• portfolio or work samples; and
• information you voluntarily provide during recruitment communications.

We use applicant information to assess suitability, communicate with candidates, administer recruitment, and consider applicants for relevant opportunities. Please do not include unnecessary sensitive personal information in your application.

Recruitment information may be accessed by authorized individuals involved in the hiring process and relevant service providers supporting recruitment administration.

CodeLixi may receive applications from individuals located in different countries. Where applicant information is transferred across borders, applicable data protection and international transfer requirements must be considered.

Applicant information will be retained only for as long as reasonably necessary for recruitment, legitimate business recordkeeping, legal compliance, or the establishment, exercise, or defense of legal claims.

8. Client Projects and Business Systems

CodeLixi may process information in connection with client engagements, including information required to understand business operations, design workflows, configure systems, provide technical services, and support agreed project activities. The nature of the information depends on the services and scope of the relevant engagement.

Where CodeLixi processes personal information on behalf of a client, the client may determine the purposes and means of processing, and CodeLixi may act as a service provider or processor.

The applicable client agreement, statement of work, data processing agreement, or other written arrangement will govern the relevant responsibilities.

Clients should not provide sensitive, regulated, or confidential information unless the relevant project scope, security arrangements, contractual terms, and legal requirements have been reviewed and approved.

CodeLixi does not represent that every service or environment is automatically suitable for regulated information, including protected health information under HIPAA. Any required business associate agreement, data processing agreement, security addendum, or other regulatory documentation must be separately evaluated and executed where applicable.

9. How We Share Personal Information

We do not sell personal information as a business model.

9.1 Service Providers

We may share information with service providers that support our operations, such as:

• website hosting and infrastructure providers;
• business email and communication providers;
• email delivery providers, including Resend for contact-form notifications;
• customer relationship management providers and CodeLixi's internal CRM;
• newsletter distribution providers, if used;
• recruitment and application tools, if used;
• security and anti-spam service providers; and
• professional advisers.

These providers may process information on our behalf or provide services necessary for our operations. The specific providers and their contractual privacy obligations should be confirmed through CodeLixi's vendor inventory.

9.2 Legal and Regulatory Requirements

We may disclose information when reasonably necessary to:

• comply with applicable law;
• respond to valid legal process;
• protect the rights, property, or safety of CodeLixi or others;
• investigate suspected fraud, abuse, or security incidents; or
• establish, exercise, or defend legal claims.

9.3 Business Transfers

If CodeLixi is involved in a merger, acquisition, restructuring, financing, or sale of business assets, relevant information may be disclosed or transferred as part of that transaction, subject to applicable law.

9.4 With Your Direction

We may share information where you request or authorize us to do so.

10. International Data Processing

CodeLixi may use service providers, infrastructure, personnel, or professional advisers located in different countries. As a result, personal information may be processed or accessed outside the country in which it was originally collected.

Where required by applicable law, CodeLixi will assess relevant international transfer requirements and implement appropriate safeguards. The specific locations and transfer mechanisms depend on the providers and systems used for the relevant activity.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including operational requirements, legal obligations, dispute resolution, security, and legitimate business recordkeeping.

Retention may depend on:

• the nature and sensitivity of the information;
• the purpose for which it was collected;
• whether an ongoing business relationship exists;
• applicable legal or regulatory requirements;
• contractual obligations; and
• whether the information is required to establish, exercise, or defend legal claims.

When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it, subject to applicable legal and operational requirements.

We may retain limited suppression information where necessary to ensure that individuals who have opted out are not contacted again for the relevant marketing purpose.

Specific retention periods for inquiries, recruitment applications, client records, technical logs, and newsletter records will be established through internal retention procedures. This Policy does not promise fixed deletion periods that have not been approved and implemented.

12. Information Security

CodeLixi uses technical and organizational measures intended to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction. Depending on the system and activity, these measures may include access restrictions, authentication controls, secure transmission, service-provider safeguards, and operational security procedures.

No website, system, email transmission, or electronic storage method can be guaranteed to be completely secure.

The actual security controls, access permissions, vendor safeguards, and incident-response procedures should be reviewed periodically and accurately documented.

If you believe you have identified a security vulnerability affecting CodeLixi, contact security@codelixi.com. Please do not include passwords, sensitive personal information, or exploit instructions in an ordinary support inquiry.

13. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have rights relating to your personal information. These rights may include:

• requesting access to personal information;
• requesting correction of inaccurate information;
• requesting deletion of certain personal information;
• requesting a copy of certain information;
• objecting to or restricting certain processing;
• withdrawing consent where processing relies on consent;
• opting out of certain marketing communications; and
• appealing certain privacy decisions where applicable law provides that right.

These rights are not universal and may be subject to legal exceptions, verification requirements, and jurisdiction-specific conditions.

13.1 Making a Privacy Request

To submit a privacy request, contact privacy@codelixi.com. Please describe the request and provide enough information for us to identify the relevant records and verify your identity where reasonably necessary.

We may request additional information to verify that you are the individual concerned or an authorized representative. We will respond in accordance with the requirements and timeframes applicable to the relevant request and jurisdiction.

We will not discriminate against individuals for exercising privacy rights where prohibited by applicable law.

14. United States State Privacy Laws

Certain US states provide privacy rights to residents when the relevant legal thresholds and applicability requirements are met. Depending on the applicable state law and the circumstances, these rights may include access, correction, deletion, portability, and opting out of certain forms of processing, including targeted advertising, sale of personal information, or certain profiling activities.

CodeLixi will assess and respond to applicable requests in accordance with the laws that govern the relevant processing. This Policy does not represent that every state privacy statute applies to CodeLixi or that every right is available in every circumstance.

14.1 Texas Residents

Texas residents may have rights under the Texas Data Privacy and Security Act where CodeLixi's activities fall within the law's scope and applicability requirements. Requests may be submitted toprivacy@codelixi.com. Where a law provides an appeal process, individuals may use the appeal procedure communicated in CodeLixi's response.

14.2 California Residents

California residents may have rights under the California Consumer Privacy Act, as amended, where CodeLixi is subject to the law and the relevant requirements are met. The availability of specific rights depends on the applicable statutory definitions, thresholds, exemptions, and processing circumstances.

CodeLixi will not claim to be subject to every provision of California privacy law without first assessing its legal applicability.

14.3 Other States

Residents of other US states may have additional rights under their applicable privacy laws. Requests will be evaluated based on the individual's location, the relevant law, and the nature of the processing.

15. Children and Minors

CodeLixi's website and business services are intended for business and professional audiences and are not directed toward children. We do not knowingly seek to collect personal information from children through our general business website.

If you believe a child has submitted personal information to CodeLixi, contact privacy@codelixi.com. We will review the request and take appropriate steps where required by applicable law.

16. Third-Party Websites and Services

Our website or communications may contain links to third-party websites, platforms, or services. Those third parties operate under their own privacy policies and practices.

CodeLixi does not control the privacy, security, or content practices of third-party services and is not responsible for their independent processing activities. We encourage you to review the privacy policies of third-party services before providing them with personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, website technologies, business operations, legal requirements, or privacy practices. When we make changes, we will update the "Last updated" date at the beginning of this Policy.

Where required by law, we will provide additional notice or obtain consent before implementing material changes that require it. The updated Policy will apply from its stated effective date, subject to applicable legal requirements.

18. Contact CodeLixi

For questions, requests, or concerns about this Privacy Policy or our handling of personal information, contact us:

CodeLixi

• Privacy: privacy@codelixi.com
• Legal: legal@codelixi.com
• Security: security@codelixi.com
• Business communications: business@codelixi.com
• Mailing address: Lake Forest Drive, Round Rock, Texas, USA 78665