Privacy Policy

1. Overview & Identity

This Privacy Policy outlines how Cotmit ("we", "our", or "us"), operated by Nexus Digital, collects, processes, and protects your personal information when you use the Cotmit Website Builder and Edge Studio software, website (cotmit.nexusdigital.net.in), and associated services.

We are committed to maintaining the highest standards of data security, privacy, and full compliance with international privacy standards, including Google’s API Services User Data Policy.

2. Information We Collect

We only collect information necessary to provide and secure your account and website builder services:

• Account Information: When you register directly, we collect your email address, chosen account username, and encrypted password hash.
• Two-Factor Authentication Data: TOTP secret keys generated for your Google Authenticator setup.
• Project & Domain Data: Custom website domain names, AST design trees, visual canvas configurations, and HTML/CSS/JS code authored within Cotmit Studio.

3. Google User Data & OAuth 2.0 Integration

Cotmit allows users to sign in seamlessly using their Google account via official Google OAuth 2.0. When you choose to authenticate via Google, we access the following limited information:

• Google Account Email (email): Used as your verified primary identifier to authenticate your account and communicate security alerts.
• Basic Profile Information (profile): Specifically your display name and profile avatar, used to populate your user profile in Cotmit Studio.

No Sale or Third-Party Transfer: Cotmit does not sell, rent, trade, or transfer Google user data to any external parties, advertisers, or data brokers under any circumstances. Google data is utilized exclusively for user identification and account provisioning within Cotmit.

4. How We Use Your Information

The collected information is used solely for the following purposes:

• To authenticate and authorize your access to your registered websites and projects.
• To send required security verification codes (e.g. 6-digit confirmation emails).
• To enforce Two-Factor Authentication (2FA) protection against unauthorized logins.
• To save, compile, and publish websites authored in Cotmit Studio.
• To maintain system integrity and prevent unauthorized misuse or fraud.

5. Data Storage, Security, & Encryption

Security is fundamental to Cotmit. All data transmitted between your device, the Cotmit Studio application, and our central database is encrypted using industry-standard Transport Layer Security (TLS 1.3).

• Passwords are cryptographically hashed using PBKDF2/SHA-256 with individual salts; plaintext passwords are never stored or accessible.
• Two-factor authentication secrets are protected with strict access control policies.
• Databases reside in enterprise-grade secured cloud environments (Supabase / AWS Tokyo) with automated backups and firewall monitoring.

6. Data Retention & User Deletion Rights

We retain your account information for as long as your account remains active. You maintain complete control over your data.

You have the right to request a complete export or permanent deletion of your account and all associated project data at any time. To request data deletion, simply send an email to nexusofficial.digital@gmail.com with your account username and email address. Requests are processed within 48 hours.

7. Cookies & Local Storage

Cotmit does not use intrusive tracking cookies. The desktop studio and web interface utilize local storage solely to maintain your active authenticated session token and your workspace state.

8. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our security team:

Nexus Digital • Cotmit Security Team
Email: nexusofficial.digital@gmail.com
Website: https://cotmit.nexusdigital.net.in