Privacy Policy

Last updated: April 1, 2026 (version 1.1)

Codavo respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR). This policy explains what data we collect, why, and what your rights are.

Who we are

Codavo, trade name of S. Ligtvoet Sole proprietorship, Rotterdam, The Netherlands Chamber of Commerce (KVK): 42017531 Email: hello@codavo.nl

Codavo is the data controller within the meaning of the GDPR.

What data we collect

Contact form

When you submit our contact form, we process:

Your name
Your email address
Your message

AI project advisor (chat function)

Our website includes an AI-powered chat function that helps you explore your project idea. When you use it, we process:

The text of your messages in the conversation
Your email address or phone number, only if you choose to receive a summary

Conversations with the AI advisor are not stored by Codavo. They are processed in real-time and exist only during your browser session.

When you request a summary: the conversation content is processed once to generate a summary. This summary is sent to you via email. In addition, the summary including the conversation and your contact details is sent to Codavo so we can follow up on your project inquiry.

Voice input (optional): you can choose to use voice input. Before the microphone is activated for the first time, we ask for your explicit consent. Your audio is sent via a secure connection to ElevenLabs (US) for speech-to-text conversion. Audio is not stored by Codavo.

AI categorization: the AI advisor indicatively categorizes your project into a pricing tier (Website, Web Application, or SaaS). This is an automated process that is purely informational. No legally or otherwise significantly affecting decisions are made based on this categorization. A binding quote is always issued separately after a personal conversation.

Summary via WhatsApp

If you choose to receive a summary via WhatsApp, the website opens a pre-filled message in your own WhatsApp app. Codavo does not send messages via WhatsApp itself. By sending the message through your own app, you share data with Meta (WhatsApp) under their own terms.

Website visits

When visiting our website, we process:

Basic visit data via Cloudflare Web Analytics (anonymized, no cookies)
Your language preference (stored in a functional cookie)

Why we process your data

Purpose	Legal basis (GDPR)
Responding to your contact form message	Performance of pre-contractual steps (Art. 6(1)(b))
Sending confirmation email	Performance of pre-contractual steps (Art. 6(1)(b))
Providing the AI project advisor	Legitimate interest (Art. 6(1)(f))
Sending summary and lead notification	Performance of pre-contractual steps (Art. 6(1)(b)), requested by you
Processing voice recognition	Consent (Art. 6(1)(a)), requested in advance via a consent dialog
Hosting and securing the website	Legitimate interest (Art. 6(1)(f))
Website statistics (anonymous)	Legitimate interest (Art. 6(1)(f))
Remembering language preference	Legitimate interest (functional cookie, exempt under Art. 11.7a Dutch Telecommunications Act)

How long we keep your data

AI conversations: not stored. They exist only in your browser session.
Summary emails: the email exists in the recipient's inbox (not controlled by Codavo). Delivery logs at Resend are retained for a maximum of 30 days.
Lead notifications: maximum 12 months after receipt
Contact form messages: maximum 12 months after last contact
Analytics data: anonymized, no personal data

Who processes your data

We have Data Processing Agreements (DPAs) in place with the following parties:

Processor	Function	Country	Transfer safeguard
Cloudflare Inc.	Website hosting and analytics	US	EU-US Data Privacy Framework
Resend Inc.	Email delivery	US	EU-US Data Privacy Framework
Anthropic PBC	AI chat processing (Claude)	US	Standard Contractual Clauses (SCCs), with Transfer Impact Assessment
ElevenLabs Inc.	Speech recognition	US	EU-US Data Privacy Framework

Your conversation text is sent to Anthropic to generate AI responses. If you use voice input, your audio is sent to ElevenLabs for speech-to-text conversion. Please refer to their respective privacy policies for further details on their data handling.

Should any of the above transfer safeguards be invalidated, we will suspend the relevant processing until a suitable alternative is available.

Cookies

Our website uses no tracking cookies. We only set a functional cookie for your language preference (Dutch/English). This cookie falls under the exemption of the Dutch Telecommunications Act (Art. 11.7a) and does not require consent.

We use Cloudflare Web Analytics, which operates entirely without cookies and does not process personal data.

Your rights

Under the GDPR, you have the following rights:

Access: you may request what data we hold about you
Rectification: you can have incorrect data corrected
Erasure: you can request deletion of your data
Restriction: you can limit how we process your data
Portability: you can request your data in a common format
Objection: you can object to processing based on legitimate interest
Withdraw consent: where processing is based on consent (such as voice input), you can withdraw at any time by contacting us at hello@codavo.nl. Since audio is processed in real-time and not stored, withdrawal takes immediate effect for future use.

Send your request to hello@codavo.nl. We will respond within 30 days.