This document is being finalised with our legal counsel; contact legal@codereviewer.cloud with questions.
This Privacy Policy explains how Techware Lab (“we”, “us”) collects and uses personal data when you visit codereviewer.cloud, join our waitlist, or use CodeReviewer (the “Service”).
Who we are
Techware Lab, 3103 Latifa Towers, Sh. Zayed Road, PO Box 282893, Dubai, United Arab Emirates, is the controller of the personal data described in this policy. We act as a processor for personal data contained in the content our customers submit to the Service. Customers remain responsible for that data, as set out in our Data Processing Addendum.
What we collect
- Waitlist, contact and download forms: your email address, and optionally your name, company, team size, message and which resource you requested.
- Form spam checks: when you send one of our website forms, we check it for automated abuse. The check uses your IP address, how long the form was open before you sent it, a hidden field that only automated tools fill in, and a bot-check result from Cloudflare Turnstile (see below). Submissions identified as spam are discarded and not stored with our waitlist or contact records.
- Campaign data: when you arrive from an ad or a tagged link, the campaign labels in that link and the page you landed on are stored with any form you send. If you accept advertising cookies, we also store the ad click identifier so we can tell Google Ads which of its ads led to a signup.
- Account data: your name, email address and profile details from the sign-in provider you use, along with your workspace, role and permissions.
- Repository and project content: source code, pull requests, comments, issues, specifications and related metadata from the repositories you connect. We access this to provide the Service. It can include personal data, such as commit author names and email addresses.
- Testing and scanning data: target URLs, test credentials you store (encrypted), screenshots, videos and traces recorded during test runs, and security and performance results.
- Optional database connections: connection details (encrypted) and the query results needed to validate issues you ask us to check.
- Usage and technical data: logs of actions in the Service, IP addresses, browser information and error reports, used to operate, secure and improve the Service.
- Cookies: see our Cookie Policy. We use cookies to keep you signed in and, only if you accept, to measure our advertising.
How we use it
We use personal data to:
- provide, maintain and secure the Service, including reviewing, fixing and testing your code;
- respond to your requests and onboard your team from the waitlist;
- send service messages, such as invitations, alerts and billing notices, and occasional product news, which you can unsubscribe from;
- prevent abuse, including screening our website forms for spam and bots, and enforcing domain verification for active security scans;
- meet legal obligations.
Our legal bases are: performing our contract with you or your organisation, our legitimate interests in running and improving a secure service, your consent where it is required, and compliance with the law.
Who we share it with
We use service providers to run the Service. These include cloud hosting and AI processing providers, and email delivery providers. They process data only on our instructions and under contracts that protect it. We may also disclose data when the law requires it, or as part of a merger or acquisition, subject to the same protections. Our website forms use Cloudflare Turnstile to tell people apart from automated tools. When a form loads or you send it, Cloudflare receives technical signals from your browser and connection, such as your IP address, browser type and connection details. Cloudflare processes these on our behalf to protect our forms, and separately as an independent controller to improve its bot detection, as described in the Cloudflare Turnstile Privacy Notice. We rely on our legitimate interest in keeping our forms free of spam and abuse.
If you accepted advertising cookies and joined the waitlist from an ad, we send Google a conversion record when your team is onboarded: the ad click identifier and a one-way hash of your email address, so Google Ads can match it to the click. We do not sell personal data.
International transfers
Our team works from the United Arab Emirates and India, and our providers may process data in other countries. When we transfer personal data, we use safeguards that the applicable law recognises.
Retention
We keep personal data for as long as your account is active or as needed to provide the Service, then delete or anonymise it, unless the law requires us to keep it longer. You can ask us to delete waitlist and contact form data at any time. For discarded spam submissions we keep only a server log entry (the IP address and why the submission was discarded), deleted on our normal log rotation. Customers can ask for their workspace data to be exported or deleted by contacting support@codereviewer.cloud.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. Where we rely on consent, you can withdraw it. To exercise these rights, email privacy@codereviewer.cloud. If your data is part of a customer workspace, we may send your request to that customer.
Security
We use technical and organisational measures to protect personal data. They include encrypting stored secrets and credentials, isolating each organisation’s data, and role-based access controls. See Trust & security.
Children
The Service is not directed at children, and we do not knowingly collect their personal data.
Changes
We will post updates to this page and change the “last updated” date. If a change is material, we will also notify account holders.
Contact
privacy@codereviewer.cloud · Techware Lab, 3103 Latifa Towers, Sh. Zayed Road, Dubai, United Arab Emirates.