Privacy Policy

Introduction

CodeArena ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at codearena.co (the "Service").

By using the service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information You Provide

• Account Information: Name, username, email address, password, and company membership details when you register
• Profile Information: Avatar, bio, role, display preferences, and workspace settings
• Payment Information: For paid company plans, payment details are processed securely by our payment processor. We do not store your full credit card number
• Feedback: Any comments, suggestions, or feedback you submit

Usage Data Automatically Collected

• Assessment Submissions: Code, prompts, critique notes, verification answers, test outcomes, timing, and related candidate work
• Practice Data: Practice attempts, solve times, progress, saved preferences, and performance metrics
• Company Workspace Data: Assessments, invite records, candidate pipeline data, reviewer notes, decisions, and team activity
• Candidate Preparation Data: Practice, coaching, or mock-interview interactions when those features are enabled
• Integrity Signals: Session events, proctoring events, paste activity, focus changes, and other signals used to protect assessment integrity
• Navigation Data: Pages visited, features used, time spent on the service
• Technical Information: IP address, browser type, device information, operating system
• Cookies and Similar Technologies: Session identifiers, authentication tokens, preferences

How We Use Your Information

We use the collected information for the following purposes:

• Provide and Maintain the Service: Enable company assessments, candidate invitations, practice mode, grading, reports, and review workflows
• Company Workspaces: Help hiring teams manage candidates, assessments, teammates, notes, and decisions
• Candidate Experience: Deliver assessment links, save work, support preparation, and communicate important service updates
• Grading and Reports: Score submissions, produce decision-support reports, and surface relevant evidence to authorized reviewers
• Process Payments: Handle company plan billing and account administration
• Improve User Experience: Analyze usage patterns to enhance functionality and features
• Communication: Send assessment, workspace, service, support, and promotional content where permitted
• Integrity Enforcement: Monitor for cheating, abuse, unauthorized access, and violations of terms of service
• Technical Support: Respond to inquiries and troubleshoot issues
• Analytics: Understand how users interact with the service to improve performance
• Legal Compliance: Comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• Company Assessments: Candidate submissions, scores, integrity signals, and reports are visible to the company that invited the candidate and authorized reviewers in that workspace
• Company Workspaces: Team members may see workspace activity, candidate records, assessment settings, and reviewer notes according to their role
• Candidate Practice: Practice data is private to your account unless you choose to share it or connect it to a company flow
• Payment Processing: Payment details are handled by a payment processor for paid company plans
• Service Providers: Third-party vendors who help us operate the service (e.g., hosting, analytics, email). These providers are contractually obligated to protect your data
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
• With Your Consent: When you explicitly agree to share information

Data Security

We implement reasonable security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure server infrastructure with access controls
• Regular security audits and updates
• Limited employee access to personal data
• Industry-standard authentication mechanisms

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal obligations)
• Opt-Out: Unsubscribe from marketing communications
• Data Portability: Receive your data in a structured, machine-readable format
• Restriction: Request limitation of data processing
• Object: Object to processing based on legitimate interests

You can exercise many of these rights directly in your account Settings: use Data Privacy → Export to download your data, and Danger Zone → Delete Account to erase your account. For other requests, contact us at support@codearena.co.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: You have the right to opt-out of the sale of your personal information. We do not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Categories of Personal Information Collected: In the past 12 months, we have collected: identifiers (name, username, email), commercial information (plan and billing status), internet activity (usage and session data), professional information supplied through company workspaces, and inferences used for assessment scoring and service improvement.

Do Not Sell My Personal Information: CodeArena does not sell, rent, or trade your personal information to third parties for monetary consideration.

To exercise your California privacy rights, email us at support@codearena.co with the subject line "CCPA Request" or use the account deletion feature in Settings.

European Privacy Rights (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under the General Data Protection Regulation (GDPR) and equivalent laws. In addition to the rights listed above, you have the right to withdraw consent at any time where processing is based on consent, and the right to lodge a complaint with your local data protection supervisory authority.

Legal bases: We process your data to perform our contract with you (providing accounts, assessments, and interviews), for our legitimate interests (securing the platform, preventing cheating and abuse, improving the service), to comply with legal obligations, and with your consent for marketing communications, which you can withdraw at any time via the unsubscribe link in any marketing email.

Candidate assessment data:When you take an assessment or interview at the invitation of a company, that company determines why and how your assessment data is used, and CodeArena processes it on the company's behalf. Where that applies, we will refer requests concerning your assessment results to the inviting company, and we recommend contacting them directly as well.

International transfers: Our services are hosted in the United States. If you use CodeArena from outside the US, your personal data is transferred to and processed in the US.

To exercise these rights, use Data Privacy → Export and Danger Zone → Delete Account in Settings, or email support@codearena.co with the subject line "GDPR Request".

Cookies and Tracking Technologies

We use cookies and similar technologies organized into the following categories:

You can change your cookie preferences at any time. Rejecting optional cookies will not affect essential site functionality.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy. Specific retention periods:

• Account Data: Retained until you delete your account
• Assessment Records: Retained according to company workspace settings, legal obligations, and service requirements
• Candidate and Reviewer Notes: Retained while needed for the company workflow unless deleted by an authorized user or required by law
• Practice and Code Submissions: Retained while your account is active, then deleted or anonymized according to our retention process
• Activity Logs: Retained for 90 days for security purposes
• Cookie Consent Records: Retained for 3 years for compliance audit

You can request early deletion of your data by deleting your account in Settings or contacting support@codearena.co.

Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. By using the service, you consent to such transfers. We ensure appropriate safeguards are in place for international transfers.

Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal reasons. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or have privacy concerns, please contact us at support@codearena.co