Privacy Policy
- Effective
- October 1, 2026
- Last updated
- September 18, 2026
Coded IQ, Inc. (“Coded IQ,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit codediq.ai (the “Site”), submit our contact form, schedule a meeting with us, or otherwise communicate with us.
What this policy does not cover. This policy applies to our public website and general business communications only. It does not cover personal information we process on behalf of our customers inside the Helix iQ platform. When a customer uses Helix iQ, that customer controls the data in its environment and Coded IQ acts as a processor/service provider under that customer’s agreement. If you are an employee or end user of a Helix iQ customer and have questions about your data, contact that organization directly.
1. Who we are
Coded IQ, Inc. is a Delaware corporation with its principal place of business at 3423 Piedmont Rd NE, Atlanta, GA 30305. For purposes of the EU and UK General Data Protection Regulation, Coded IQ is the controller of the personal information described in this policy.
Contact: info@codediq.ai · 855-CODED-AI (855-263-3324)
2. Information we collect
2.1 Information you provide through our contact form
Our contact form collects:
| Field | Required |
|---|---|
| First name | Yes |
| Last name | Yes |
| Company | Yes |
| Yes | |
| Phone | No |
| Company size | Yes |
| Decision stage | No |
| Project start timeframe | No |
| Message | No |
Submissions are transmitted to HubSpot, our customer relationship management and marketing analytics provider, and stored as a contact record there. We use this information to respond to your inquiry and to understand where you are in evaluating our products.
If you have allowed analytics cookies, HubSpot’s script also records what you enter in the form when you submit it, separately from the submission our own server sends. If you have declined, that does not happen and only our server submission is sent — the form works the same either way.
2.2 Meeting scheduling
We use HubSpot’s meeting scheduler for demos, technical discussions, custom project conversations, and general questions. When you click a scheduling link you leave codediq.ai and book through HubSpot, which collects your name, email address, selected time, and any details you enter, and creates a calendar event.
2.3 Information you send us directly
Email, phone calls, and any other correspondence you initiate, including anything you choose to include in it.
2.4 Website analytics
We use the HubSpot tracking code and Google Analytics to understand how visitors use the Site. Together they collect:
- Pages viewed, the order you viewed them in, and time of each visit
- Referring source, including search engines, links from other sites, and campaign parameters in the URL you arrived on
- Browser type, operating system, and device type
- IP address and the approximate location derived from it
- A randomly generated visitor token stored in your browser, which distinguishes your browser from others but does not identify you by name
Linking browsing history to your contact record. If you later submit our contact form, the visitor token is sent with your submission and HubSpot associates your earlier browsing activity on the Site with your contact record. This means pages you viewed before identifying yourself become visible to us alongside your name and email. If you decline analytics cookies, form submissions still work and simply are not linked to prior browsing.
Google Analytics. Google Analytics records the same kinds of usage information in aggregate, using a randomly generated client ID stored in the _ga cookie. It is not linked to your contact record or to anything you submit through our forms.
We do not run advertising pixels, cross-site advertising trackers, or session recording on this Site.
2.5 Server logs
Our web server processes standard request data, including IP address, requested URL, and timestamp, for delivery, security, and troubleshooting. This is inherent to serving a website and happens regardless of your cookie choices.
2.6 Information we obtain from third parties (data enrichment)
We use HubSpot’s data enrichment to complete and verify business information about the people and companies in our CRM.
What we send. For contact enrichment, your first name, last name, and work email address. For company enrichment, your company’s domain.
What comes back. HubSpot matches that information against its commercial dataset, third-party data providers, and publicly available information from across the internet, and writes verified business details onto your record. These can include job title, seniority, company industry, employee count, revenue range, location, technologies in use, and professional social media profiles.
What this means in practice. Your contact record may contain business information about you that you did not give us directly. You have the right to ask what we hold, where it came from, and to have it corrected or deleted — see Sections 8 and 9.
We use enrichment only for business information, in a business context. We do not use it to build profiles of you as a private individual, and we do not make the results available to anyone else.
2.7 Sensitive information
We do not seek to collect sensitive personal information (government identifiers, health data, precise geolocation, biometric data, racial or ethnic origin, religious beliefs, or union membership) through the Site, and we ask that you not submit it in the message field.
3. Cookies and similar technologies
The Site sets the following cookies through the HubSpot tracking code and Google Analytics:
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
__hstc | Main visitor tracking cookie. Contains the domain, visitor token, first-visit, last-visit and current-visit timestamps, and a session counter. | 6 months | Analytics |
hubspotutk | Keeps track of a visitor’s identity. Passed to HubSpot on form submission and used to deduplicate contacts. | 6 months | Analytics |
__hssc | Tracks sessions. Determines whether to increment the session count in __hstc. | 30 minutes | Analytics |
__hssrc | Set when the session cookie changes, to detect whether you restarted your browser. | Session | Analytics |
_ga | Google Analytics. Distinguishes visitors using a randomly generated client ID. | 2 years | Analytics |
_ga_N595W7EZHX | Google Analytics. Keeps session state. | 2 years | Analytics |
codediq_cookie_consent | Records your cookie choice so we don’t ask again and so your decision is respected. Stored in your browser’s local storage rather than in a cookie, and never sent to us or to anyone else. | Until you clear it | Strictly necessary |
The HubSpot and Google Analytics cookies above are non-essential and are set only if you allow the analytics category. The record of your own choice is strictly necessary and is stored only as a result of making that choice.
We do not set advertising cookies and we do not use cookies to track you across other websites.
Cookies set by HubSpot’s own domains. Loading the HubSpot code above also causes HubSpot’s domains to set a security cookie named __cf_bm. It is set by Cloudflare, which protects HubSpot’s infrastructure, and it distinguishes automated traffic from real visitors. It lasts around 30 minutes, is set on HubSpot’s domains rather than on codediq.ai, and is not used to identify you, track you between sites, or build a profile. Because nothing from HubSpot loads unless you allow the analytics category, these are not set if you decline.
Your choices. When you first visit the Site we show a cookie banner. You can accept all cookies, decline all of them, or open Customize to allow or refuse each optional category individually and see exactly which cookies it sets. We do not set the analytics cookies listed above unless you allow that category. If you decline, the Site works normally, no analytics cookies are set, and any contact form you submit is not linked to your browsing history.
You are not required to choose before continuing. The banner does not block the Site, and you can close it without deciding — nothing optional is stored in that case, and we will ask again on your next visit. You can change your choice at any time using the link in the Site footer, and you can also control cookies through your browser settings. We honor Global Privacy Control (GPC) signals: if your browser sends one, we treat it as a refusal of all optional cookies and do not show the banner at all.
We show this banner to every visitor regardless of location, rather than only to visitors in regions that require it.
4. How we use personal information
We use personal information to:
- Respond to your inquiry and follow up on it
- Schedule and conduct meetings, demos, and technical discussions
- Evaluate whether and how our products fit your requirements
- Complete and verify business information about you and your company, so we can qualify and route inquiries accurately
- Understand which channels bring visitors to the Site and how the Site is used, so we can improve it
- Send you information about our products where you have asked for it or where it is relevant to your business role, subject to your right to opt out
- Operate, secure, maintain, and improve the Site
- Negotiate, enter into, and administer commercial relationships
- Detect, investigate, and prevent fraud, abuse, and security incidents
- Comply with legal obligations and establish, exercise, or defend legal claims
We do not use personal information collected through this Site to train artificial intelligence or machine learning models.
Automated decision-making
We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.
5. Legal bases for processing (EEA, UK, and Switzerland)
| Purpose | Legal basis |
|---|---|
| Responding to inquiries; pre-contract discussions | Performance of a contract or steps at your request (Art. 6(1)(b)) |
| Analytics cookies and the browsing history they generate | Consent (Art. 6(1)(a)) |
| Marketing to business contacts | Consent (Art. 6(1)(a)) or legitimate interests (Art. 6(1)(f)), as permitted locally |
| Business data enrichment | Legitimate interests (Art. 6(1)(f)) in maintaining accurate business contact records |
| Server logs, security, and troubleshooting | Legitimate interests (Art. 6(1)(f)) |
| Legal and regulatory compliance | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may object as described in Section 9. Where we rely on consent, you may withdraw it at any time.
6. How we disclose personal information
We do not sell personal information. We disclose it to:
- HubSpot, which provides our customer relationship management, website analytics, marketing email, meeting scheduling, and business data enrichment. Contact form submissions, meeting bookings, and Site analytics data are processed by HubSpot on our behalf. For data enrichment, we send limited business identifying information to HubSpot, which matches it against its own and third-party datasets and operates under its own terms for that purpose.
- Google, which provides Google Analytics. If you allow analytics cookies, Site usage data is processed by Google on our behalf.
- Other service providers who perform functions for us, including website hosting and business email.
- Professional advisors, including attorneys, accountants, auditors, and insurers.
- Legal and safety recipients, where disclosure is required by law, subpoena, or legal process, or is necessary to protect our rights or the safety of others.
- Corporate transactions. In a merger, acquisition, financing, reorganization, or sale of assets, personal information may transfer as part of the transaction, subject to customary confidentiality protections.
A current list of our service providers is available on request at info@codediq.ai.
7. International transfers
We are based in the United States, and our service providers may process information in the United States and other countries. If you are in the EEA, the UK, or Switzerland, transfers of your personal information to the United States are made under the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, as incorporated into our data processing terms with HubSpot and with Google. You may request a copy by contacting us.
8. U.S. state privacy rights
Depending on where you live, U.S. state privacy laws (including in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, and Maryland, among others as they take effect) may give you the right to:
- Know / access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients
- Correct inaccurate personal information
- Delete personal information we hold about you
- Obtain a portable copy of information you provided to us
- Opt out of sale, sharing, and targeted advertising
- Limit the use of sensitive personal information
- Be free from discrimination for exercising these rights
- Appeal a denial of your request
Categories collected in the last 12 months
Under the California Consumer Privacy Act, in the preceding 12 months we have collected: identifiers (name, business email, phone number, IP address, and online identifiers such as a visitor token and an analytics client ID); commercial information (your stated interest, company size, decision stage, and project timeframe); internet or network activity (pages viewed, referring source, and interaction with the Site); professional or employment-related information (employer and, where you provide it, role); geolocation data limited to approximate location from IP address; business information obtained through data enrichment (including job title, seniority, company industry, size, revenue range, and location); and inferences drawn from the above about professional interests. Sources, purposes, and recipients are described in Sections 2, 4, and 6.
Sale and sharing
We do not sell or rent your personal information to anyone, and we do not share it for advertising. We do not provide your information to other companies for their own marketing, and we run no advertising pixels or cross-site trackers.
We do use a business data provider to verify and complete business contact details, as described in Section 2.6. To do that, limited business identifying information is sent to that provider, which maintains its own datasets and operates under its own terms rather than solely on our instructions. We use this to keep our records accurate — not to make your information available to others. If you would rather we did not enrich your record, email info@codediq.ai and we will exclude you.
We honor Global Privacy Control (GPC) signals. We do not knowingly sell or share the personal information of consumers under 16 years of age.
How to exercise rights
Email info@codediq.ai with the subject line “Privacy Rights Request.” We verify your identity by matching the information you provide against our records and may request additional information where necessary. You may use an authorized agent who provides proof of your written permission. We respond within the time required by applicable law, typically 45 days, with an extension where permitted. If we deny your request, you may appeal by replying to our response; we will inform you of the outcome and, where required, of your right to contact your state attorney general.
9. EEA, UK, and other international rights
If you are in the EEA, the UK, or Switzerland, you have the right to access, rectify, erase, restrict, or object to processing of your personal information, the right to data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You may lodge a complaint with your local supervisory authority, or with the UK Information Commissioner’s Office if you are in the UK.
Where we have obtained business information about you from sources other than you — see Section 2.6 — you also have the right to be told the categories of data concerned and the source it came from. Contact us and we will provide it.
If you are in Canada, you have the right under PIPEDA and applicable provincial law (including Quebec’s Law 25) to access and correct your personal information and to withdraw consent, and you may complain to the Office of the Privacy Commissioner of Canada.
10. Marketing communications
You can opt out of marketing messages at any time using the unsubscribe link or by emailing info@codediq.ai. We will still send messages related to your specific requests, such as responses to your inquiry, meeting confirmations, and contract or legal notices.
11. Retention
We keep personal information only as long as necessary for the purposes described here:
- Contact records and inquiry history: 24 months from last contact
- Marketing contact records: until you unsubscribe, after which we keep a suppression record indefinitely so your opt-out is honored
- Website analytics data: retained by HubSpot according to its standard retention, and by Google Analytics for the data retention period set in our account; cookies expire as stated in Section 3
- Server logs: 90 days
- Records needed for tax, accounting, or legal claims: as long as required by law
12. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, single sign-on with multi-factor authentication for internal systems, managed endpoints, and least-privilege access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Children’s privacy
The Site is intended for business users. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
14. Third-party sites
The Site links to third-party services, including the HubSpot meeting scheduler. We are not responsible for their privacy practices, and this policy does not apply to them.
15. Changes to this policy
We may update this policy. We will post the revised version here and update the “Last updated” date. If changes are material, we will provide additional notice. Continued use of the Site after the effective date constitutes acceptance.
16. Contact us
Coded IQ, Inc.
3423 Piedmont Rd NE, Atlanta, GA 30305
info@codediq.ai · 855-CODED-AI (855-263-3324)
See also our Terms of Service.