What cookies are

A cookie is a small text file that a website asks your browser to store on your device. When you come back, your browser sends the cookie back to the site, so the site can recognise your device, remember your choices, or measure how the site is used.

Cookies come in a few common forms:

• Session cookies last only while your browser is open and are deleted when you close it.

• Persistent cookies stay on your device for a set period or until you delete them.

• First-party cookies are set by Kodexo Labs on kodexolabs.com.

• Third-party cookies are set by another company whose service we use on the Site, such as an analytics or advertising provider.

This Policy uses the word "cookies" as a shorthand for cookies and the similar technologies described in Section 8, including pixels, web beacons, software development kits, local storage, and device identifiers.

Who we are

Kodexo Labs is the trading name of Kodexo Labs LLC. Ltd. and its affiliates. "Kodexo Labs", "we", "our", and "us" in this Policy refer to the Kodexo Labs entity that controls the data described below.

Our principal place of business is:

Kodexo Labs LLC

316 W 12th St, 4th Floor, Austin TX 78701, United States

Email: contact@kodexolabs.com

Phone: +1 219 766 5259

For cookie and data-protection enquiries from individuals in the European Economic Area or the United Kingdom, you can reach us at:

Kodexo Labs UK

30 Churchill Place, London E14 5RE, United Kingdom

Email: contact@kodexolabs.com

We operate offices in the United States (Austin, New York, San Francisco, Chicago), the United Kingdom (London), and Pakistan (Karachi). Affiliated entities include TheAgentive.ai, New York App Devs, and Kodexia.ai. Where they set or read cookies through our Site, this Policy applies to that activity.

Scope of this Policy

This Policy applies to cookies set when you visit kodexolabs.com and any subdomain we control (collectively, the "Site").

This Policy does not cover:

• Third-party websites and platforms we link to, such as LinkedIn, Twitter, GitHub, YouTube, Clutch, Upwork, or Cal.com. Once you leave our Site or interact with an embedded service, that company's own cookie and privacy policies apply.

• Cookies set inside client products we build and host on a client's behalf. Those are governed by the relevant client's policies and our engagement terms.

• Email tracking, which is described in our Privacy Policy rather than here.

Read this Policy together with our Privacy Policy at kodexolabs.com/privacy-policy, which explains your data-protection rights in full.

Why we use cookies

We use cookies to:

• Keep the Site secure and working, including signing you in, balancing server load, and guarding against fraud and abuse.

• Remember your settings, such as your cookie choices, language, and display preferences, so you do not have to set them on every visit.

• Understand how the Site is used, including which pages are visited, how people arrive, and where they run into problems, so we can fix and improve it.

• Measure and improve our marketing, including which campaigns bring people to the Site and which content is useful, where you have agreed to this.

• Show and measure ads on third-party platforms, where you have agreed to this.

We only use non-essential cookies, including all performance, functional, and marketing cookies, after you give consent where the law requires it. Strictly necessary cookies are always on because the Site cannot run without them.

How we ask for your consent

When you first visit the Site, a cookie banner appears before any non-essential cookie is set. You can:

• Accept all cookies.

• Reject all non-essential cookies. Rejecting is as easy as accepting, and strictly necessary cookies stay on either way.

• Open the preference centre and choose which categories to allow, one category at a time.

We record your choice and the date you made it, so we can prove your consent and apply it on later visits. We ask you to confirm your choices again at least every 12 months, and sooner if we add a new purpose or a new third-party cookie that materially changes what we collect.

You can change or withdraw your consent at any time by selecting the "Cookie preferences" link in the footer of every page. Withdrawing consent does not affect cookies that were already set before you withdrew it, but it stops us from setting those cookies again, and you can clear existing cookies through your browser as described in Section 11.

Where the law does not require prior consent, for example for strictly necessary cookies or in regions that use an opt-out model, the banner tells you what we use and how to opt out.

Categories of cookies we use

We sort our cookies into four categories. Section 7 lists the individual cookies in each one.

Strictly necessary cookies

These are required to deliver the Site and the features you ask for. They handle security, sign-in, session continuity, load balancing, and remembering your cookie choices. They do not track you for marketing. They cannot be turned off through our banner because the Site would not work without them, though you can still block them in your browser at the cost of some functions.

Performance and analytics cookies

These count visits, measure traffic sources, and show us how people move through the Site, always in a way that helps us improve it. We turn on IP anonymisation where the tool supports it. If you reject this category, we will not load these cookies, and we fall back to aggregate, non-identifying measurement only.

Functional cookies

These remember choices you make, such as your language, region, or interface settings, and they power features like live chat. They make the Site more useful to you. If you reject this category, some convenience features may not work or may reset on each visit.

Marketing cookies

These are set by us and by advertising and social-media partners to measure ad performance, limit how often you see an ad, and show you relevant content on other platforms. Some marketing cookies may be used for cross-context behavioural advertising. We only set them with your consent where consent is required, and we honour opt-out signals where an opt-out model applies. If you reject this category, you will still see ads, but they will be less relevant and we will not measure them through these cookies.

The cookies we set, listed in full

The tables below list the cookies we and our partners use, grouped by category. We review them against a cookie scan of the live Site and update this Policy when cookies are added or removed. Names, providers, and durations can change when a provider updates its product, so treat the durations as maximums. "First party" means the cookie is set on kodexolabs.com. "Third party" means it is set by the named provider.
Strictly necessary cookies

Performance and analytics cookies

Functional cookies

Marketing cookies

Other tracking technologies

Cookies are not the only way devices are recognised. Depending on your choices, we and our partners may also use:

• Pixels and web beacons: tiny images or snippets of code, including the LinkedIn Insight Tag, the Meta Pixel, the Twitter / X Pixel, and the Google tag, that report when a page or email is opened and let partners measure ad performance.

• Local storage and session storage: small amounts of data your browser keeps for the Site to load faster and remember state. These are not cookies but serve similar purposes and are covered by this Policy.

• Software development kits and tags: code from analytics and marketing partners that runs on the Site to collect the measurements described above.

• Server logs and device signals: information your device sends with each request, such as IP address, browser, and operating system, which we use for security and aggregate analytics.

We treat all of these under the same consent rules as cookies. Where consent is required for a cookie of a given category, the same consent is required for the matching technology in that category.

Third parties that set cookies through our Site

Some cookies are set by companies whose tools we use. When a cookie of theirs is set, that company processes the data under its own privacy and cookie policies, which we link to so you can review them.

The main third parties are:

• Google (Analytics 4, Google Ads, DoubleClick, YouTube): analytics and advertising. See policies.google.com/technologies/cookies.

• HubSpot: analytics, forms, and live chat. See legal.hubspot.com/cookie-policy.

• LinkedIn: advertising and conversion measurement. See linkedin.com/legal/cookie-policy.

• Meta (Facebook, Instagram): advertising and measurement. See facebook.com/policies/cookies.

• Twitter / X: advertising and measurement. See help.x.com/rules-and-policies/x-cookies.

• Cloudflare and Vercel: security, delivery, and performance of the Site.

• Cal.com: cookies set when you book a call through an embedded scheduler.

We do not control how these third parties use the data they collect through their cookies. We carry written agreements with our processors that limit their use of data on our behalf, and we describe our sharing practices in full in our Privacy Policy.

Do Not Track and Global Privacy Control

Some browsers send a "Do Not Track" signal. There is no agreed industry standard for how to handle it, so, like most websites, we do not change our behaviour based on Do Not Track alone.

We do honour the Global Privacy Control (GPC). Where your browser or an extension sends a GPC signal, we treat it as a valid request to opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising in regions that recognise it, including California and other US states whose laws require it. We apply the opt-out to the browser and device that send the signal.

How to manage or turn off cookies

You are in control of cookies. You can manage them in several ways.

Through our preference centre

Select "Cookie preferences" in the footer of any page to change or withdraw your consent at any time. Strictly necessary cookies cannot be switched off here because the Site needs them.

Through your browser

Every major browser lets you see, block, and delete cookies. Blocking strictly necessary cookies will break parts of the Site. Helpful guides:

• Google Chrome: support.google.com/chrome/answer/95647

• Apple Safari: support.apple.com/en-us/HT201265

• Mozilla Firefox: support.mozilla.org/kb/cookies-information-websites-store-on-your-computer

• Microsoft Edge: support.microsoft.com/help/4027947

Through industry opt-out tools

For interest-based advertising cookies, you can also opt out across many companies at once:

• Digital Advertising Alliance: optout.aboutads.info

• Network Advertising Initiative: optout.networkadvertising.org

• European Interactive Digital Advertising Alliance: youronlinechoices.eu

Through provider settings

You can adjust ad and analytics settings directly with Google (adssettings.google.com), and use the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout). You can manage ad preferences on LinkedIn, Meta, and Twitter / X inside each platform's account settings.

Clearing cookies or using opt-out tools sets new preference cookies, so you may need to repeat your choices if you later clear all cookies.

Country and region-specific rules

We aim to meet the strictest cookie rule that applies to you. The summaries below explain how the main regimes work and where you can complain.

European Economic Area and Switzerland

Under the ePrivacy Directive, the GDPR, and the Swiss Federal Act on Data Protection, we set non-essential cookies only after you give clear, informed, and freely given consent, and we make rejecting as easy as accepting. You can withdraw consent at any time and complain to your local data protection authority.

United Kingdom

Under the Privacy and Electronic Communications Regulations and the UK GDPR, we ask for your consent before setting non-essential cookies. You can complain to the UK Information Commissioner's Office at ico.org.uk.

United States

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, and under the privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, and other states, certain cookie activity may count as a "sale" or "sharing" of personal information for targeted advertising. We give you the right to opt out, we honour the Global Privacy Control as an opt-out signal, and we do not discriminate against you for opting out. You can opt out through our preference centre, the "Cookie preferences" footer link, or a "Your Privacy Choices" link where we provide one.

Canada

Under the Personal Information Protection and Electronic Documents Act and Quebec's Law 25, we rely on consent appropriate to the sensitivity of the data and give you a clear way to refuse non-essential cookies. You can complain to the Office of the Privacy Commissioner of Canada.

Brazil

Under the Lei Geral de Proteção de Dados, we rely on a lawful basis, usually consent, for non-essential cookies and respect your rights over the data they collect. You can complain to the Autoridade Nacional de Proteção de Dados.

Australia

Under the Privacy Act 1988, we are transparent about the data cookies collect and give you a way to opt out of non-essential cookies. You can complain to the Office of the Australian Information Commissioner.

South Africa

Under the Protection of Personal Information Act, we rely on a lawful basis for non-essential cookies and respect your rights. You can complain to the Information Regulator.

Other regions

Where your local law sets a stricter rule than the ones above, we apply that stricter rule to you. If you are unsure which rules apply, contact us at contact@kodexolabs.com.

How long cookie data is kept

Each cookie has its own lifespan, shown in the tables in Section 7. As a general rule:

• Session cookies are deleted when you close your browser.

• Persistent cookies last for the period stated in Section 7, or until you delete them, whichever comes first.

• We treat the durations in Section 7 as maximums. A provider may set a shorter life, and you can always end a cookie early by clearing it.

Data collected through cookies is then held under the retention windows in our Privacy Policy. For analytics, that means data is held for 14 months in Google Analytics 4 and then aggregated. Where the law requires a shorter period, the shorter period applies.

International data transfers

Some of the third parties that set cookies through our Site are based outside your country, including in the United States. When data collected through cookies is transferred out of the European Economic Area or the United Kingdom, we and our partners rely on safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, the EU-US and UK-US Data Privacy Framework where a provider is certified, or an adequacy decision where one exists.

You can ask for a copy of the safeguards that apply to a specific transfer by emailing contact@kodexolabs.com. Our Privacy Policy explains international transfers in more detail.

Changes to this Policy

We may update this Policy when we add or remove cookies, change a purpose, or when the law changes. When we do, we update the "Last updated" date at the top and the version number in the footer.

If a change materially affects what we collect or how we collect it, we will surface the cookie banner again so you can review and reset your choices, and we will post a notice on the Site for at least 30 days.

Continued use of the Site after the effective date of an updated Policy, together with your cookie choices, governs the cookies we set.

Contact us

For any question, request, or complaint about cookies:

Email: contact@kodexolabs.com

Subject line: "Cookie request: [your request]"

Mail (United States):

Kodexo Labs LLC · Attn: Privacy

316 W 12th St, 4th Floor

Austin TX 78701

United States

Mail (United Kingdom):

Kodexo Labs UK · Attn: Privacy

30 Churchill Place

London E14 5RE

United Kingdom

We aim to respond within 5 business days and to resolve all requests within the timelines set by the laws that apply to you.