Privacy Policy

This Privacy Policy explains how Codespeed Inc. ("Codespeed," "we," "us," or "our") collects, uses, and discloses personal information through the Codespeed marketing website, including our early access, contact, and careers forms.

This policy does not govern customer data processed through the Codespeed Product. Product data is governed by the applicable customer agreement, Data Processing Addendum, and Product privacy materials.

1. Who We Are

Codespeed Inc. operates from New York, New York, United States. For personal information covered by this policy, Codespeed is the controller or business responsible for deciding why and how that information is processed.

Contact us at privacy@codespeed.ai.

2. Information We Collect

Information you provide

We collect information you choose to provide, including:

• Early access and contact information: work email address, name, company, role, engineering team size, AI engineering setup, current priorities, form source, and related correspondence.
• Career information: name, email address, role applied for, professional profile or portfolio link, résumé, application response, and related recruiting correspondence.
• Subscription information: the email address you give us to receive Codespeed writing and updates, together with the part of the site you subscribed from.
• Communications: information included when you contact us, respond to us, request support, or exercise a privacy right.

Please do not submit sensitive personal information, account credentials, confidential source code, health information, payment-card information, or government identifiers through our marketing-site forms.

Information collected automatically

When you use the site, we and our hosting and security providers may process:

• IP address and request metadata;
• browser, device, operating-system, and language information;
• referring page, requested page, and date and time of access;
• authentication, security, error, and diagnostic events; and
• a short-lived hashed version of an IP address used to limit abusive form submissions.

When you move from an inline email form to the full early access form, the site may use temporary browser session storage to carry the email address between those forms and then remove it from session storage. If you mute or unmute the site's ambient audio, that preference is kept in your browser's local storage so the site can respect it on your next visit.

3. How We Use Information

We use personal information to:

• operate, authenticate, secure, troubleshoot, and maintain the marketing site;
• process early access and contact requests;
• confirm a subscription and send the Codespeed writing and updates you asked for;
• evaluate potential design partners and customer relationships;
• respond to questions and communicate about the request or relationship you initiated;
• evaluate career applications and communicate about current or future opportunities;
• prevent spam, abuse, fraud, and security incidents;
• understand form activity and improve site operations using operational or aggregated information;
• comply with law and enforce or defend our legal rights; and
• support a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law.

We do not use marketing-site form submissions to train third-party foundation models.

4. Legal Bases for Processing

Where European Economic Area or United Kingdom data-protection law applies, we process personal information based on one or more of the following:

• Steps at your request: to respond to an early access, business, or career inquiry before entering a contract or employment relationship.
• Legitimate interests: to operate and secure the site, prevent abuse, evaluate business and recruiting opportunities, and communicate with people who contact us, where those interests are not overridden by individual rights.
• Consent: where we ask for consent for a specific purpose. Consent may be withdrawn at any time without affecting earlier processing.
• Legal obligations: to comply with applicable law, legal process, and recordkeeping duties.

5. How We Disclose Information

We may disclose personal information to:

• Service providers that support website hosting and delivery, databases, email delivery and subscription management, internal business notifications, content management, security, spam prevention, and technical operations.
• Professional advisers such as attorneys, accountants, auditors, insurers, and financing advisers when reasonably necessary.
• Authorities or other parties when required by law or reasonably necessary to protect rights, safety, security, and the integrity of the site.
• Transaction participants in connection with a potential or completed financing, merger, acquisition, reorganization, or sale of assets.

Early access and career submissions may be copied into Codespeed's private business email inboxes so the appropriate team can respond. Subscriber email addresses are held by our email delivery provider so we can send and manage the messages you subscribed to.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not disclose marketing-site form submissions to advertisers.

6. Cookies, Analytics, and Tracking

The current marketing site uses only the functional browser storage described in Section 2. We do not currently use non-essential analytics cookies, advertising cookies, session replay, or cross-site tracking on the marketing site.

Our forms are protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. Turnstile runs in your browser, receives your IP address along with basic request and device signals, and may set its own browser storage to complete that check. Cloudflare processes this information on our behalf to protect our forms from abuse.

We measure page traffic using Vercel Web Analytics, which records which pages are viewed and which sites refer visitors to us. It sets no cookies, stores no personal information, assigns no persistent visitor identifier, and never follows a visitor to another site. Vercel processes this data on our behalf as a service provider.

Because we do not currently use cross-site or targeted-advertising tracking, the site does not respond to browser Do Not Track signals as a separate opt-out mechanism. For the same reason, a Global Privacy Control signal has no sale or sharing of personal information to opt out of on this site. If our analytics or tracking practices change, we will update this policy and provide consent or choice mechanisms where required before enabling them.

7. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including:

• early access and business-contact information while we evaluate or maintain the requested relationship and for an appropriate period afterward;
• career information while we evaluate the application and for an appropriate period for recruiting, recordkeeping, and potential future opportunities;
• authentication, security, rate-limit, and diagnostic information for shorter operational periods appropriate to the relevant purpose; and
• records needed to comply with law, resolve disputes, and enforce agreements.

Retention varies based on the nature of the information, our relationship with you, operational needs, legal requirements, and whether the information appears in protected backups or service-provider systems. When information is no longer needed, we delete it, de-identify it, or place it beyond ordinary use, subject to legal and technical limitations.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No system, transmission, or storage method is completely secure, and we cannot guarantee absolute security.

9. International Processing

Codespeed and some service providers may process personal information in the United States and other countries. Those countries may have different data-protection laws than the country where you live. Where applicable law requires a transfer mechanism or other safeguard, we will use an appropriate mechanism for the transfer.

10. Your Rights and Choices

Depending on where you live, you may have the right to:

• request access to personal information we hold about you;
• request correction or deletion;
• object to or request restriction of certain processing;
• request a portable copy of information you provided;
• withdraw consent where processing is based on consent;
• opt out of non-transactional marketing communications; and
• appeal a denied request or complain to a data-protection authority.

To make a request, email privacy@codespeed.ai. You may also opt out of non-transactional email by using the instructions in the message or replying to the sender. We may need to verify your identity and authority before completing a request. We will respond within the period required by applicable law.

These rights may be limited or subject to exceptions under applicable law. We will not discriminate against you for exercising an applicable privacy right.

11. Children

The marketing site is intended for business and professional audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through this site. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.

12. Third-Party Links

The site may link to third-party websites and services. Their privacy practices are governed by their own policies, not this policy.

13. Changes to This Policy

We may update this policy as our site or legal obligations change. We will post the updated policy here and change the effective date. If a change materially affects how we use information already collected, we will provide additional notice or request consent where required.