How we collect, use, and protect information when you interact with codigenius.com.
Codigenius Sdn. Bhd. (202301026086 / 1520009-D) is a software development company based in Kuala Lumpur, Malaysia. This policy describes how we collect, use, and protect your personal information when you use our website at www.codigenius.com.
We collect information you voluntarily provide through our contact form:
We also collect anonymous usage data automatically through Google Analytics, including:
This data is anonymized and does not personally identify you. Google Analytics uses cookies to collect this information. You can opt out by disabling cookies in your browser settings or by installing the Google Analytics Opt-out Browser Add-on.
We use the information you provide solely to:
We do not sell, share, or distribute your personal information to third parties.
Contact form submissions are sent directly to our email (info@codigenius.com) via your device's email client. We do not store your data on our web server or in any third-party database through this website.
We use a small number of cookies and browser storage entries — only for anonymous analytics (Google Analytics 4, Microsoft Clarity) and to remember your cookie banner choice. We do not use advertising, retargeting, or personalisation cookies.
Analytics tools run under Google Consent Mode v2: they start in "denied" mode by default and only activate after you click Accept on the cookie banner. For the full list of cookies, purposes, durations, and opt-out steps, see our dedicated Cookie Policy.
Codigenius operates AccessOS, a building operations product for visitor flow, member access, and building management. AccessOS runs on its own domain and, when used, may collect additional personal data beyond what this website collects — including but not limited to:
Biometric data (PDPA §40). Biometric information is treated as sensitive personal data under the Malaysia Personal Data Protection Act 2010, Section 40. Where AccessOS operates in face-scan mode, biometric data is collected only from individuals who provide explicit consent at the point of enrolment. The operating tenant (the building, community, or organisation deploying AccessOS) is the data controller for its visitor and occupant records; Codigenius acts as the data processor operating the platform on the tenant's behalf under a data processing arrangement.
Product-specific privacy terms (retention periods, sub-processors, data location, incident notification, data subject request handling) will be presented at the point of signup or account creation for AccessOS, and are the authoritative source for how personal data is handled inside the product. Nothing on this website constitutes AccessOS product terms.
Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the right to:
To exercise these rights for data held by Codigenius (contact form enquiries, general correspondence), contact info@codigenius.com. For AccessOS product data, contact the tenant (building operator or organisation) that captured your data directly — they hold the primary access/correction/deletion authority as data controller.
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction — including encrypted transport (HTTPS), access controls, and audit logging on production systems.
Breach notification. In the event of a personal data breach that affects your data, we will notify the Malaysia Personal Data Protection Commissioner and affected individuals within 72 hours of confirmation, in accordance with the 2024 amendments to the Personal Data Protection Act 2010. Notification will describe the nature of the breach, categories of data affected, likely consequences, and mitigation measures.
If you discover a security vulnerability on any Codigenius website or product, please report it via our responsible disclosure policy: security@codigenius.com. We do not pursue legal action against good-faith security researchers who follow responsible disclosure.
Our website links to or embeds external services (LinkedIn, GitHub, Google Analytics, Microsoft Clarity, Better Stack). We are not responsible for the privacy practices of these third parties. Please review their privacy policies directly.
International transfers. Analytics data collected via Google Analytics 4 and Microsoft Clarity is processed by Google LLC (United States) and Microsoft Corporation (United States) respectively, under their standard contractual clauses for cross-border personal data transfers. By clicking Accept on our cookie banner you consent to this transfer under Section 129 of the Personal Data Protection Act 2010. If you decline analytics cookies, no personal data is transferred internationally through these tools.
We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If a change is material, we may take additional steps to notify you.
For questions about this privacy policy, data subject access requests, or personal data concerns:
Codigenius Sdn. Bhd. (202301026086 / 1520009-D)
Data Protection Officer: dpo@codigenius.com
General enquiries: info@codigenius.com
Security disclosures: security@codigenius.com
Kuala Lumpur, Malaysia
See also: Terms of Service · Cookie Policy