Skip to content
CodeMach

Privacy Policy

Last updated: August 21, 2026

1. Introduction

CodeMach, a technology consultancy operating from State of Mexico, Toluca, is responsible for the processing described in this notice. Contact us athola@codemach.dev. We do not publish a walk-in office address; projects and requests are handled remotely.

2. Data We Collect

We collect only what is needed to answer a request, protect the site, and—when authorized—measure our campaigns:

3. Use of Information

We use contact information to:

We do not sell or rent your data. Accepting this notice to submit a quote request does not grant advertising consent; those are separate choices.

4. Providers and measurement

The site may use Cloudflare for hosting, security, Turnstile, and operational storage; Resend as a processor for HTTPS transport of the transactional notice to the operations mailbox; Google Tag Manager and Google Analytics for analytics; and Meta Business Tools for campaign measurement. These providers may process information outside Mexico under their own terms and safeguards. To prepare the transport, on August 21, 2026 CodeMach reviewed Resend's Data Processing Addendum, contractually incorporated into Resend's accepted terms, and its current subprocessor list.

If you accept advertising measurement, CodeMach may send Meta aLead event containing a deduplication identifier, a normalized phone transformed using SHA-256, IP address, browser, and available advertising cookies. We do not send Meta your free-form project description, business, timeline, or WhatsApp messages. If you decline marketing, the request is still retained so we can answer it, but it is not sent through Conversions API.

Each request uses the preference and recorded version in effect when it is submitted. Required acceptance of the notice so we can answer the request is recorded separately from analytics and marketing.

So a CodeMach team member can handle your request, CodeMach's backend may instruct Resend to transport a transactional copy of the contact and project data to one verified, access-restricted operations mailbox. The sender is limited to the isolated notify.codemach.devsubdomain, and open and click tracking are disabled. That notice does not contain IP address, browser data, advertising cookies, click identifiers, or anti-spam signals. It is generated even when marketing is declined because its purpose is to answer the request you initiated, not to send advertising.

5. Cookies and preferences

Optional categories are denied by default. You may reject all optional cookies, allow analytics only, or accept analytics and marketing. ThePrivacy preferences button lets you change or withdraw your choice; essential features and the form remain available. The change applies to future optional processing in the browser and to new requests. To object to, cancel, or delete information already received, email hola@codemach.dev.

Withdrawal does not automatically reverse an event already sent or delete a previously accepted request. Rights concerning that earlier processing can be exercised through the channel in section 7.

6. Retention and security

Requests that do not become engagements and their copies in the operations mailbox are retained for up to 180 days after we receive them unless legal or contractual duties require a different period. Terminal Queue/outbox records become eligible for deletion 30 days after they close and are removed by the next scheduled run. Active jobs, including jobs deferred because of a provider quota, remain active or deferred until delivery, exhaustion, or deletion of the associated request; once terminal, the preceding deletion rule applies. Separately, Resend's Free planstates email-data retention of up to 30 days; that provider period does not extend CodeMach's 180-day period or replace the deletion procedure. We apply encryption, access control, anti-spam validation, and idempotency; no system can eliminate security risk completely.

7. Your rights

You may request access, correction, deletion, or objection and may withdraw applicable consent. Send the request from the related email or phone, describe the right you want to exercise, and allow us to verify your identity before changing records.

8. Data you should not send

Do not place passwords, banking information, clinical records, diagnoses, or other sensitive personal data in the form's open field. Contact us first to agree on a protected channel.

9. Contact and changes

For questions, rights requests, or deletion of an inquiry, email hola@codemach.dev. If processing changes materially, we will update the date and request consent again where appropriate.