Data Processing

An organization generally determines why and how personal data in its Cocoding workspace is used. For that data, the organization may be the controller or business and Cocoding may be its processor or service provider. Cocoding remains responsible for processing it controls directly, such as account administration, security, billing, and operation of its public websites, as explained in the Privacy Notice.

The service configuration, authorized user actions, applicable order form, and any signed data processing agreement define customer instructions. Customers must have a lawful basis and appropriate notices for personal data they submit, connect, generate, or deploy through Cocoding.

Model, source-control, cloud, payment, and communication providers selected or enabled for a workspace may process information needed for the requested operation. Customers should assess those providers and configure regions, retention, and access appropriate to their use case where choices are available.

Organizations that need a data processing agreement can contact legal@cocoding.ai. The applicable document must be reviewed and executed by authorized parties; this public page is an information and request entry point, not an executed DPA and not a substitute for one.

A DPA request should identify the organization, Cocoding plan or order, intended processing, relevant jurisdictions, and an authorized contact. Do not send production datasets, credentials, or sensitive personal data with the request.

Cocoding assists customers with data-subject requests and security obligations to the extent required by an applicable agreement and law. Individuals seeking data held in an organization-managed workspace should normally contact that organization first. Direct privacy requests can be sent to legal@cocoding.ai and security reports to security@cocoding.ai.