Scope and identity
This notice concerns Coduf at coduf.com and the account services connected to it. Coduf is a product name. Registered controller details and the dedicated privacy contact are shown when provided by the operator. A domain name alone does not establish a registered company identity.
Data used to provide the service
Account records include identity and contact details supplied at registration, a password hash and session information. Requests may involve prompts, selected project context, model responses, device authorization details and usage records. Security and audit records can include event timestamps and network information. Payment records may include transaction references from the configured provider. Avoid sending secrets or personal records that are not needed for the task.
Purposes and processing grounds
Account and session information supports requested access, authentication and account management. Prompt context is used to produce the requested response. Usage and payment references support package administration and billing. Security records support investigation of failures and unauthorized activity. Optional website analytics depend on your choice in Cookie preferences. The controller must maintain the applicable legal basis for each processing activity under the law that applies; this product description is not a substitute for that record.
Recipients and model providers
The model provider selected by the configured gateway receives the information needed to answer a request. Payment and optional measurement services may process information when used. Different providers can have different processing locations and retention terms. Do not infer local-only inference or zero retention from the presence of a desktop window. Ask the operator for the provider and transfer arrangements that apply to your account before sending sensitive material.
International processing
The location of the website visitor, operator and configured provider can differ. Where an international transfer is regulated, the responsible controller must establish and disclose the applicable transfer arrangement. This page does not claim that a particular adequacy decision, contractual safeguard or country-specific exemption has been established for every deployment.
Retention and account deletion
Data is retained according to the service's account, security and operational processes. The account interface supports export and a deletion request. A deletion request is scheduled rather than instant and can be withdrawn during the restoration window shown in the account interface. Some records may require separate retention for legal, security or billing reasons. A zero-retention guarantee is not made here. Ask the operator for the applicable retention periods and backup handling when you need that detail.
Your rights and choices
Depending on applicable law, you may have rights to information, access, correction, deletion, portability, restriction or objection, and to withdraw consent for consent-based processing. Withdrawal does not automatically reverse processing that already occurred. GDPR rights and rights under Turkey's Law No. 6698 have their own conditions and procedures; neither replaces the other. You may also contact the competent supervisory authority where applicable. Provide enough information to locate your request, but do not send passwords or unnecessary identity documents by ordinary email.
How to make a request
Use the published support or privacy contact and identify the account and the type of request. Identity verification may be needed to protect account data. Optional website tracking can be changed directly through Cookie preferences. Do not treat the website's product name as a substitute for the operator's full statutory controller disclosure.