Privacy policy

Effective October 16, 2026

CodiraID is a service operated by Codira, Inc. (“Codira”, “we”, “us”), a Delaware corporation with its principal office at 6166 North Scottsdale Road, C4003, Paradise Valley, AZ 85253, United States. This policy explains what information CodiraID collects, how we use and share it, and the choices you have. It applies to codiraid.com, app.codiraid.com and the CodiraID service (together, the “Service”).

CodiraID is in private development. During this period it is used only by people Codira has invited, and some features described here may not be available yet.

1. Information we collect

Information you give us

• Account details: your name, email address, password (stored only as a one-way hash) and the authentication code secret used for two-step sign-in.
• Your professional record: biography, roles, organizations, publications, milestones, photographs and the documents you upload to support them.
• Content you create: drafts, articles, posts, notes, approvals and settings.
• Messages to us: anything you send when you contact us for support.

Information from accounts you connect

When you choose to connect another service, we receive the information that service shares under the permissions you grant. Depending on what you connect, this can include:

• Google Search Console: search performance data (queries, pages, clicks, impressions, positions) and index status for the sites you have verified.
• Google Analytics: aggregated traffic reports for the properties you choose.
• YouTube: your channel details, the ability to upload videos you approve, and performance figures for those videos.
• Google Calendar: availability and the events you choose to create, for scheduling speaking engagements.
• LinkedIn, X, Facebook, Instagram and similar platforms: your profile identifier, the ability to publish posts you approve, and the performance figures those platforms provide for them.

We store the access tokens these services issue in encrypted form and use them only to perform the actions you request.

Publicly available information

To show how you appear online, the Service collects publicly available information about the name and organizations you ask it to track. This includes search results obtained through licensed data providers and public articles, posts and videos that mention you. These sources may contain information about other people. We keep only what is needed to show you the mention, such as the address, title, date, publisher and a short excerpt, and we do not build profiles of anyone other than the account holder.

Information collected automatically

We record basic technical information when you use the Service, such as IP address, browser type, pages visited within the app, and the times of sign-ins and changes. We use this for security, troubleshooting and the audit history of your account. The app uses only cookies that are needed to keep you signed in and protect against forged requests; it does not use advertising cookies.

Information about visitors to your own website

If you use CodiraID to receive inquiries from your own website, the names, email addresses and messages that visitors submit are processed on your behalf and stored in your account. You decide what happens to them, and we handle them only to provide the Service to you.

2. How we use information

• To provide the Service: storing your record, preparing drafts, publishing what you approve, and showing your search and mention reports.
• To run the AI-assisted features you choose to use, such as drafting, source checking and classifying mentions. Their output is a suggestion for you to review, and nothing is published without your approval.
• To keep the Service secure, prevent abuse, and maintain an audit history of approvals and changes.
• To communicate with you about your account and the Service.
• To meet legal obligations and enforce our terms.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it to show you ads.

3. Google user data

CodiraID’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing features of CodiraID that you request, such as showing your Search Console and Analytics reports, uploading videos you approve to YouTube, and scheduling events in your calendar.
• We do not transfer Google user data to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you.
• We do not use Google user data for advertising, and we do not sell it.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
• People at Codira do not read Google user data unless you give us permission for a specific support request, it is needed for security, it is required by law, or it has been aggregated and anonymized for internal operations.

4. How we share information

We share information only in these cases:

• Platforms you publish to: when you approve a post, we send that content to the platform you chose. Once published, it is governed by that platform’s policies.
• Service providers that process data for us under contract and only on our instructions:

• Legal reasons: when required by law or valid legal process, or to protect the rights, safety and property of you, Codira or others.
• Business transfers: if Codira is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this policy.

We use AI providers under terms that do not allow them to use your data to train their models.

5. How long we keep information

We keep your information for as long as your account is open. You can delete individual items at any time. When you close your account, we delete your data within 30 days, except where we must keep it longer to meet legal obligations, resolve disputes or enforce our agreements, and except for backups, which are overwritten on a regular cycle. You can also disconnect any connected account at any time, which stops further data collection from it; you can revoke Google access at myaccount.google.com/permissions.

6. Security

We protect information with encryption in transit and at rest, encrypted storage of access tokens, required two-step sign-in, role-based access, and an audit log of sensitive actions. No system is perfectly secure, and we will notify you as required by law if a breach affects your information.

7. Your choices and rights

You can access, correct, export and delete your information in the app, or by contacting us. Depending on where you live, you may have additional rights, including the right to know what we collect, to request deletion, to correct inaccurate information, and not to be discriminated against for using these rights. California residents: we do not sell or share personal information as those terms are defined in the California Consumer Privacy Act. We will respond to verified requests within the time the law requires.

8. Children

The Service is for professionals and is not directed to anyone under 18. We do not knowingly collect information from children.

9. International users

Codira is based in the United States, and information is processed and stored in the United States. If you use the Service from elsewhere, you understand that your information will be transferred to and processed in the United States.

10. Changes to this policy

If we make material changes, we will update the effective date above and notify account holders before the changes take effect.

11. Contact

Questions or requests about privacy can be sent to hello@codira.com or to Codira, Inc., 6166 North Scottsdale Road, C4003, Paradise Valley, AZ 85253, United States.