Privacy Policy

CodexGiza ("CodexGiza", "we", "us") is an independent software project operated by its founder, Rafael Beltran, in St. Augustine, Florida. This policy explains what information we collect when you use codexgiza.com or connect an account, device, or vehicle to CodexGiza, how we use it, and the choices you have.

1. What we collect

Visiting the website

• Server logs. Our hosting provider (Vercel) records standard request data such as IP address, user agent, requested URL, and timestamp to serve pages and protect against abuse.
• No advertising trackers, no third-party analytics, no cookies. The public site does not set tracking cookies. The homepage collects no analytics. The one exception is the Zencil promotional page at codexgiza.com/zencil, which records simple anonymous event counts as described below.
• Browser storage. The site uses your browser's local storage only for display preferences (for example, the avatar rendering tier). This stays on your device and is not sent to us.
• Fonts. Typefaces load from Google Fonts, which receives your IP address as part of that request.

The Zencil promotional page (codexgiza.com/zencil)

This page is operated by CodexGiza and promotes products from the brand Zencil. It contains Amazon affiliate links. To learn which parts of the page are useful, it sends a small number of first-party events to our own server.

• What is recorded. The event type (for example page view, click on an Amazon link, section viewed, FAQ opened, scroll depth), the device category (mobile, tablet or desktop), the website you came from (host name only), any campaign tags in the link you used (utm_source, utm_medium, utm_campaign, utm_content, utm_term), a random identifier that exists only for that one page visit, and the time.
• What is not recorded. No IP address, no user agent, no name or email, no cookie, no stored identifier on your device, and nothing that lets us recognise you on a later visit. We use your IP address only in memory, briefly, to limit abuse.
• Your choice. If your browser sends Global Privacy Control or Do Not Track, the page sends no events at all.
• Retention. Event records are kept for up to 13 months and then deleted.
• Amazon. When you follow a link to Amazon you leave our site and Amazon's own privacy notice and cookies apply. As an Amazon Associate we earn from qualifying purchases. Amazon's reports to us about purchases are aggregate and do not identify buyers. Clicks we record show that a link was clicked, not that anything was bought.

The "Speak to CodexGiza" demo

• The demo currently runs in scripted mode: your typed or spoken question is matched against fixed responses in your browser and is not stored by us.
• If we enable the live link, your messages in that session are sent to our server and relayed to an AI model provider (Anthropic) to generate a reply, and optionally to a voice provider (ElevenLabs) to produce speech. We do not store chat transcripts. The interface label shows "LIVE" when this mode is active.
• Voice input uses your browser's built-in speech recognition. Your browser may send audio to its vendor to transcribe it; see your browser's privacy policy.

Request Access form

• We collect the name, organization (optional), email, role, and message you submit. The form is processed by Formspree and delivered to us by email. We use it only to reply to you.

Connected accounts and vehicles (early access)

When you connect a vehicle or account to CodexGiza, you authorize it through that provider's own sign-in and consent screens. We receive only the permissions ("scopes") you approve, and you can revoke them at any time with the provider or by disconnecting in CodexGiza.

• Access and refresh tokens issued by the provider. These are encrypted at rest in our database and are never sent to your browser, written to logs, or shared.
• Vehicle or account data you authorize, such as battery level, charging state, and vehicle name. We request it when you ask for it or when a routine you set up needs it. Location data is requested only if you grant a location scope, and only for features you turn on.
• Audit records of what CodexGiza did: the time, the action, which connection it used, and the outcome. Audit records do not contain tokens or message contents.

2. How we use information

• To operate the website and respond to your requests.
• To perform the actions you ask CodexGiza to take on your connected accounts and vehicles, and to show you the results.
• To keep an audit trail so you can see what was done, by what, and when.
• To protect the service against abuse, including rate limiting by IP address.

We do not sell personal information, and we do not use your data to train AI models.

3. Who else receives data

We may also disclose information if required by law or to protect the rights, safety, or property of users or the public.

4. Retention and deletion

• Tokens are kept while a connection is active and deleted when you disconnect, when the provider revokes them, or when they expire.
• Vehicle and account data is held only as long as needed to show you a result or run a routine you set up.
• Audit records are kept for operational and security review. You can ask us to export or delete yours.
• Form submissions stay in our email until no longer needed to respond to you.

To request access to, correction of, or deletion of your information, email rafael@codexgiza.com.

5. Security

All traffic to codexgiza.com uses HTTPS. Integration credentials are stored only on the server, encrypted at rest, and redacted from logs. Access to the connected-vehicle console requires authentication. No system is perfectly secure; if you believe your connection has been compromised, disconnect it and revoke CodexGiza's access in your provider account immediately.

6. Children

codexgiza.com is not directed to children under 16, and we do not knowingly collect their information.

7. Changes

We will post any changes to this policy on this page and update the effective date above.

8. Contact

Rafael Beltran · CodexGiza · St. Augustine, Florida · rafael@codexgiza.com · 727-204-3913