Privacy Policy

Effective Date: July 15, 2026 | Last Updated: July 15, 2026

Marketing Studios ("we," "us," or "our") operates DeadCode.io (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

    Key Points:
    We collect minimal data necessary for service functionality
Your code is never stored permanently without explicit consent
You can delete your account and all associated data at any time
We comply with GDPR, CCPA, PIPEDA, and Australian Privacy Act

  

1. Information We Collect

1.1 Information You Provide

Account Information: Email address, name, profile photo (via Google OAuth)
Payment Information: Billing details processed securely via Razorpay (we do not store full card details)
Repository Access: GitHub OAuth tokens (encrypted, stored securely, revokable anytime)

1.2 Automatically Collected Information

Usage Data: Pages visited, features used, scan history
Device Information: IP address, browser type, operating system
Cookies: Session cookies for authentication, preference cookies (optional)

1.3 Code Analysis Data

Scan Results: Dead code metrics, file paths, issue summaries
Temporary Processing: Source code is processed in-memory during scans and immediately discarded
No Code Storage: We do not permanently store your source code unless you explicitly enable cloud backup (opt-in feature)

2. How We Use Your Information

We use collected information to:

Provide, maintain, and improve the Service
Process transactions and send transaction notifications
Analyze code repositories for dead code detection
Send administrative and service-related communications
Respond to support requests and inquiries
Detect, prevent, and address technical issues and security threats
Comply with legal obligations

We do NOT:

Sell your personal data to third parties
Use your code for training AI models without explicit consent
Share your repository data with unauthorized parties

3. Data Sharing and Disclosure

3.1 Service Providers

We share data with trusted third-party providers:

Provider	Purpose	Data Shared	Location
Supabase	Authentication & Database	Email, profile data	US (AWS)
Razorpay	Payment Processing	Billing info, transaction data	India
GitHub	Repository Access	OAuth tokens	US
Cloudflare	CDN & Security	IP address, request logs	Global

3.2 Legal Requirements

We may disclose your information if required by law, court order, or to:

Comply with legal processes
Protect our rights, property, or safety
Prevent fraud or illegal activities
Enforce our Terms of Service

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. You will be notified of any such change.

4. Data Retention

Active Accounts: Data retained as long as your account is active
Scan Results: Retained for 90 days (configurable in settings)
Deleted Accounts: Personal data deleted within 30 days of account deletion request
Backup Data: Retained for 30 days in encrypted backups for disaster recovery
Legal Hold: Data may be retained longer if required by law

5. Your Rights (GDPR, CCPA, PIPEDA, Australian Privacy Act)

5.1 Access & Portability

Right to Access: Request a copy of your personal data
Data Portability: Export your data in machine-readable format (JSON, CSV)

5.2 Correction & Deletion

Right to Rectify: Update or correct inaccurate data
Right to Erasure (Right to be Forgotten): Delete your account and all associated data

5.3 Restriction & Objection

Right to Restrict Processing: Limit how we use your data
Right to Object: Opt-out of marketing communications

5.4 Withdraw Consent

Revoke OAuth Access: Disconnect GitHub access at any time
Cookie Preferences: Manage cookie settings via our Cookie Consent Manager

5.5 Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

5.6 California Privacy Rights (CCPA)

California residents have additional rights:

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell data)
Right to non-discrimination for exercising CCPA rights

5.7 Canadian Privacy Rights (PIPEDA)

Canadian residents can:

Access personal information we hold
Challenge the accuracy and completeness of information
Request deletion or correction

5.8 Australian Privacy Rights

Australian residents can:

Request access to personal information
Request correction of inaccurate data
Complain to the Office of the Australian Information Commissioner (OAIC)

How to Exercise Your Rights

Email us at: privacy@marketingstudios.in

Or use the in-app Account Settings → Privacy & Data section.

6. Data Security

We implement industry-standard security measures:

Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
Access Controls: Role-based access, multi-factor authentication
Regular Audits: Security assessments and penetration testing
Incident Response: 24-hour breach notification policy

Note: No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your residence, including the United States and India. We ensure adequate safeguards through:

Standard Contractual Clauses (SCCs) approved by the European Commission
Privacy Shield Framework (where applicable)
Data Processing Agreements with all third-party processors

8. Children's Privacy

DeadCode.io is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover that a child under 18 has provided us with personal data, we will delete it immediately.

9. Cookies and Tracking Technologies

9.1 Essential Cookies

Authentication: Session management (required for login)
Security: CSRF protection, fraud detection

9.2 Optional Cookies (Require Consent)

Analytics: Usage statistics, feature adoption (anonymized)
Preferences: Theme, language, dashboard layout

You can manage cookie preferences via the Cookie Consent banner or in Account Settings → Privacy.

10. Third-Party Links

The Service may contain links to third-party websites (e.g., GitHub, Razorpay). We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing any information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified via email or in-app notification.

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

Marketing Studios
Email: privacy@marketingstudios.in
Support: sales@marketingstudios.in
Website: https://deadcode.io

Data Protection Officer (DPO)

For GDPR-related inquiries:
Email: dpo@marketingstudios.in

Regulatory Authorities

You have the right to lodge a complaint with a supervisory authority:

EU: Your local Data Protection Authority
US (California): California Attorney General's Office
Canada: Office of the Privacy Commissioner of Canada
Australia: Office of the Australian Information Commissioner (OAIC)