Last updated: July 12, 2026
Coded Thinking OÜ
Sakala tn 7-2
10141 Tallinn
Estonia
Email: koren@codedthinking.com
We are the data controller for personal data processed in connection with Dodo Review (dodo.review), part of the Dodo brand (getdodo.dev).
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Account creation, purchase confirmations | Contract (Art. 6(1)(b)) |
| Name (optional) | Account personalisation | Consent (Art. 6(1)(a)) |
| Uploaded source code/files | Providing the review service | Contract (Art. 6(1)(b)) |
| Claim text you submit | Providing the review service | Contract (Art. 6(1)(b)) |
| Payment information | Processed entirely by Paddle — we never see card details | Legitimate interest (Art. 6(1)(f)) |
| Usage data (page views, features used) | Improving the Service | Legitimate interest (Art. 6(1)(f)) |
| IP address, browser info | Collected by Vercel as part of hosting — used for debugging, quality assurance, and security. We do not directly collect or store IP addresses. | Legitimate interest (Art. 6(1)(f)) |
Your source code and files are processed by our AI models solely to generate a review. We do not:
All payments are handled by Paddle.com as our merchant of record. When you make a purchase, Paddle collects your name, email, billing address, and payment details directly. Their handling of your data is governed by Paddle’s Privacy Policy. We never receive or store your full payment card details.
| Data | Retention period |
|---|---|
| Uploaded files and results | 90 days after review completion, then deleted |
| Account data | Until account deletion or 12 months of inactivity |
| Usage logs | 12 months |
| Invoices (via Paddle) | As required by Estonian accounting law (7 years) |
You may request earlier deletion of your uploaded files by contacting us.
As an EU data subject, you have the right to:
To exercise any of these rights, email koren@codedthinking.com. We will respond within 30 days.
Your data is processed within the European Economic Area (EEA). If we use third-party services located outside the EEA, we ensure appropriate safeguards (Standard Contractual Clauses) are in place.
We use essential cookies for authentication and security. We use Vercel Analytics and Vercel Observability tools for debugging and quality assurance. These tools are provided by our hosting platform and process data in accordance with Vercel’s Privacy Policy. Vercel retains analytics data for up to 30 days. You can disable cookies in your browser, but this may affect Service functionality.
We purchase LLM inference through the Vercel AI Gateway. Your uploaded code and claim text are sent to inference providers solely to generate the review. We do not use your code or text for any other purpose, including model training.
Each provider processes data under their own privacy policies and contractual obligations with us.
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.
We will notify you of material changes via email or a notice on the Service.
Data controller: Coded Thinking OÜ, Sakala tn 7-2, 10141 Tallinn, Estonia — koren@codedthinking.com
Supervisory authority: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Väike-Ameerika 19, 10129 Tallinn, Estonia
Email: info@aki.ee
Website: https://www.aki.ee