Privacy policy
How we handle your information.
Effective October 17, 2026. This policy covers codicilla.com, the inquiries you send us, and personal data that can appear in the company data we license or buy.
Who we are
Codicilla ("we", "us") licenses or buys company data for AI training. For questions about this policy or to make a request, use our contact page.
What we collect on this website
When you send us an inquiry
Our forms collect what you type: your name, email address, organization, your role or who would sign, your company's status and industry, the kinds of records involved, and your message. We also store the IP address the form was sent from, and if you arrived from one of our ads, the campaign tags in the link (for example utm_source). We use this to reply to you, to assess a possible license or purchase, to measure which ads bring inquiries, and to block spam and abuse.
When you browse
Our hosting provider records standard technical information, such as IP address, browser type and the pages requested, to deliver and secure the site. Our pages load fonts from Google Fonts, so your browser contacts Google's servers.
Advertising cookies
We use the LinkedIn Insight Tag to measure our LinkedIn ads and to build audiences of past visitors. It sets cookies and sends LinkedIn information about your visit, such as the pages viewed and your IP address. LinkedIn handles that information under its own privacy policy. We do not load the tag if your browser sends a Global Privacy Control signal, or if your device is set to a time zone in Europe or the United Kingdom. You can also opt out in LinkedIn's ad settings, or block third-party cookies in your browser.
How we share it
We do not sell your personal information. We share it only with service providers that run our business for us: our hosting provider (Fly.io, in the United States), our email provider (Google Workspace), and LinkedIn as described above. We may also disclose information if the law requires it, or as part of a merger or sale of our business. Under some state laws, ad cookies like the Insight Tag can count as "sharing" for advertising; you can stop it as described above.
How long we keep it
We keep inquiries for as long as we need them to respond and to manage any relationship that follows, and we delete them when you ask, unless we must keep them for legal reasons.
Personal data in the company data we license
Company records such as email, chat and support tickets can contain personal data about employees, former employees and customers. Before we license any of it:
- Health records, payment card and bank account data, and children's data are excluded by default.
- Direct messages, private channels, personal mailboxes, and HR, legal and board material are excluded by default.
- Customer data held under an NDA or confidentiality terms is excluded unless the customer consents.
- Content from people in the European Union and the United Kingdom is excluded.
- Names are replaced with stable pseudonyms, and contact details and ID numbers are removed. We check a sample by hand and report the residual rate.
- Where our review calls for it, employees and former employees get notice and a chance to opt out, and their content is removed if they do.
Licenses allow AI training only, with no resale and no attempt to identify people. If you think your information may be in a dataset we hold, contact us and we will look into it and remove it where we can.
Your choices and rights
You can ask us to tell you what personal information we hold about you, to correct it, or to delete it, and you can opt out of advertising cookies as described above. Depending on where you live, you may have further rights under laws such as the California Consumer Privacy Act. We will not treat you differently for using them. To make a request, use our contact page; we may need to confirm your identity before we act on it.
Security
We use encryption in transit, access controls, and limits on who can see inquiries. No system is perfectly secure, and we will tell you if a breach affects your information as the law requires.
Children
This site is for businesses. It is not directed to children, and we do not knowingly collect information from anyone under 16.
Changes
If we change this policy, we will update the date at the top of this page.