Your data, your control.

1. Who we are

CMA (Client Management App) is operated by Coder Studios Ltd, a company registered in England and Wales. When we say "we", "us", or "our" in this policy, we mean Coder Studios Ltd.

2. What data we collect

We collect the following data when you use CMA:

• Account information — your name, email address, and password (encrypted).
• Business data — client details, quotes, invoices, appointments, documents, and media you upload.
• Usage data — pages visited, features used, and timestamps for activity tracking.
• Technical data — IP address, browser type, and device information for security and performance.

3. Why we collect it

We use your data to:

• Provide and operate the CMA service.
• Send you important account notifications (e.g. password resets, billing).
• Improve the platform based on how features are used.
• Protect against fraud, abuse, and security threats.

We will never sell your data to third parties. We do not use your business data for advertising.

4. How we store and protect it

Your data is stored on secure servers within the United Kingdom. We use encryption in transit (TLS/SSL) and at rest. Passwords are hashed using industry-standard algorithms. Access to production systems is restricted to authorised personnel only.

5. Third-party services

We use the following third-party services to operate CMA:

• Stripe — for processing card payments securely. We never see or store your full card details.
• Cloudflare — for security, performance, and DDoS protection.
• Postmark — for sending transactional emails (e.g. quote notifications, invoices).

6. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of all data we hold about you.
• Rectification — correct any inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Portability — export your data in a standard format.
• Object — opt out of non-essential data processing.

To exercise any of these rights, email us at [email protected].

7. Data retention

We retain your data for as long as your account is active. If you cancel your account, we retain your data for 30 days in case you change your mind, then permanently delete it. You can request immediate deletion at any time.

8. Cookies

CMA uses essential cookies to keep you logged in and remember your preferences. We do not use advertising or tracking cookies. Cloudflare may set security-related cookies to protect against threats.

9. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email. The "last updated" date at the top of this page will always reflect the most recent version.

10. Contact

If you have any questions about this privacy policy or how we handle your data, contact us at [email protected].