Privacy policy
This policy covers codebetter.ai and the CodeBetter scan, Fix Sprint and Watch services, operated by Balazs Harcsa, Dubai, United Arab Emirates, which is the controller of the personal data described here. Contact: hello@codebetter.ai.
Last updated 1 October 2026. Draft, pending legal review.
What we collect
- Contact details you give us: name, email, company, when you request a scan or buy a Fix Sprint or Watch subscription
- The URL of the site you ask us to scan or fix
- Scan results: the pages we crawled and the issues found
- Payment details: collected and processed by Paddle.com, our merchant of record, under Paddle’s own privacy policy. We receive your name, email, billing country, VAT ID if given, and what you bought, never your card details
- Basic technical logs (request times, errors) needed to run the scanner and this site
- Business contact details for prospecting, described in the next section
If we contacted you first
We contact a small number of businesses whose public website we have scanned, to tell them what we found and offer our services. For that we keep business contact details that the business itself published: the company name, its website, its general contact address or contact form, and where relevant the name, job title and work email of a person responsible for the website or online shop, as shown on the company’s own site, a public company register, or a professional profile they published. We also keep a short record of what we sent, when, and any reply.
The legal basis is our legitimate interest in offering a relevant business service to businesses (Article 6(1)(f) GDPR). We only write about the website of the business we write to, we do not buy contact lists, we do not contact private individuals, and we send at most three short messages per business, then stop. Where a country’s law requires prior consent for a given channel, we do not use that channel without it.
You can object at any time, free of charge, by replying “stop” or by emailing hello@codebetter.ai. We then stop all contact the same day and put your address and company domain on a suppression list, which is the only thing we keep about you after that, so that we never contact you again. Prospecting data of businesses that do not become clients is deleted 12 months after our last message.
Why we use it, and on what legal basis
- To run the scan or Fix Sprint you asked for, and deliver the report or code changes (to take steps you asked for before a contract, and to perform the contract: Article 6(1)(b) GDPR)
- To bill you for a Fix Sprint or Watch subscription, and to keep accounting records (contract, and our legal obligations: Article 6(1)(b) and (c))
- To answer questions you send us (our legitimate interest in answering, Article 6(1)(f))
- To contact businesses about our services, as described above (Article 6(1)(f))
- To improve our scanner and fix pipeline, using anonymized or aggregated data where possible (Article 6(1)(f))
We do not sell your data, we do not use it for advertising, and we make no automated decisions about you.
Cookies and analytics
This site does not currently run third party analytics or advertising cookies. If we add basic, privacy-respecting analytics later, we will update this page before we do.
Who we share it with
- Paddle.com, our merchant of record, which processes payments, charges VAT and issues invoices (it receives payment details directly, we do not)
- Google (Google Workspace), which hosts our email
- Vercel, which hosts this website
- Cloudflare, which stores and serves files such as reports and images
- Nobody else, unless required by law
Transfers outside the EU
We are based in the United Arab Emirates, and some of the providers above are based in the United States or process data there. Where personal data from the EU or EEA leaves it, we rely on the safeguards the GDPR provides for that, such as a provider’s certification under the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. You can ask us for details by email.
How long we keep it
We keep client contact details and scan results while you are a client, and for up to 24 months after your last interaction with us, except where accounting or tax law requires us to keep invoices longer. Prospecting data is deleted 12 months after our last message unless you become a client. Suppression list entries are kept for as long as we do any outreach, because they are what stops us contacting you again. You can ask us to delete your data sooner at any time.
Your rights
If you are in the EU or EEA, you have the right under the GDPR to access, correct, or delete the personal data we hold about you, to restrict its use, to receive it in a portable format, and to object to its use. You can object to direct marketing at any time, and we will then stop. To exercise any of these rights, email hello@codebetter.ai; we will respond within one month.
You also have the right to complain to a data protection supervisory authority, in particular in the EU or EEA country where you live or work.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected here with an updated date.
Contact
Questions about this policy, or a request about your data: hello@codebetter.ai.