No hedging and no lawyer-speak where plain English will do. If anything here is unclear, ask us and we will fix the wording.
Last updated 2 August 2026
We do not track you. There is no analytics package, no advertising network and no third-party tracker in the apps or in the product. Nothing about your behaviour is collected, profiled or sold.
Your business data is yours. You put it in, you can export it to CSV whenever you like, and you can ask us to delete it.
Every company gets its own database. Not a shared table with a customer column. A separate database file per workspace.
We only email you about the product. Invites, password resets, notifications you asked for, and service notices. No marketing to your staff.
We are a small company. Result Studio is built and run by Codesky Ltd. When you email us, a person who works on the product reads it.
Result Studio is a product of Codesky Ltd, a company registered in England and Wales, trading from Lincolnshire. Contact: jordan@codesky.co.uk.
Two different roles apply depending on the data:
For your account (your name, work email, password, which workspace you belong to, sign-in records) we are the data controller. We decide what is needed to run the service.
For the records you put into your workspace (your customers, deals, tickets, invoices, projects, files, emails) you are the controller and we are the processor. It is your data about your customers. We hold and process it on your instructions, and we do not use it for anything of our own.
Name, work email, a hashed password (never the password itself), your role and permissions, and which workspace you belong to.
When you signed in, from which IP address, and significant actions inside the workspace. This exists so an admin can see who did what, and so we can investigate if an account is misused.
Whatever you choose to store: contacts, organisations, deals, tickets and their email threads, projects, tasks, quotes, invoices, payments and uploaded files.
If you connect a mailbox so that customer email becomes tickets, we hold the messages that arrive at that address and the replies sent from it.
If you put our chat widget or a web form on your site, we record what the visitor sends plus the pages they viewed and their IP address, so you can see the context of an enquiry. You are the controller for that.
If you switch on notifications, we store the token your device issues so we can send them. It identifies the device, not you personally, and it is deleted when you sign out.
The apps are a window onto the same workspace, so everything above applies. Three things are specific to them:
Face ID and fingerprint. If you switch on unlock, the check is performed entirely by your phone's operating system. We never see your face, your fingerprint, or any representation of them. The app is only told yes or no.
Your sign-in token is stored in the device keychain, the same protected store your phone uses for passwords.
An offline copy of records you have recently viewed is kept on the device, so the app still shows something without a signal. It is cleared when you sign out or switch workspace.
The apps contain no analytics, no advertising and no tracking of any kind. We do not track you across other apps or websites, and there is nothing in them that could.
We keep this list short on purpose. These are the only third parties involved in running the service:
Hosting. Your workspace database and uploaded files sit on a managed cloud server they provide. They are a United Kingdom company.
Sends transactional email: invites, password resets, ticket replies, invoices and reminders. They see the contents of those messages in order to deliver them.
Delivers push notifications to the mobile apps, passing them on to Apple and Google. They see the device token and the notification text.
Only if you choose to connect it: reading a Gmail mailbox for tickets, or syncing a calendar. You grant that yourself and can revoke it at any time.
We do not sell data, we do not share it with advertisers, and we do not give it to anyone else unless the law requires it. If that ever happened we would tell you, unless we were legally prevented from doing so.
Data is held on our hosting provider's managed cloud server and backed up nightly. Backups are kept for a rolling period and then overwritten.
We keep your data for as long as your workspace exists. Ask us to delete it and we will remove the workspace and its database. Backups made before that date are overwritten in the normal cycle rather than picked apart, so a copy may persist in a backup for a short period after deletion.
Sending email means it leaves our systems: Postmark and the recipient's mail provider will hold their own copies under their own terms, and we cannot recall a message once it has been delivered.
Under UK data protection law you can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we are using it. Email jordan@codesky.co.uk and we will come back to you within a month.
You do not need to ask us for an export. Every workspace can export its records to CSV from inside the product, whenever you like.
If you are the customer of one of our customers and want your data removed, the quickest route is to ask the company you dealt with. They control it and can delete it directly. Tell us and we will pass it on, but they are the ones who decide.
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
The product uses one cookie: the one that keeps you signed in. It is not used for tracking and there is nothing to consent to, because we set no advertising or analytics cookies. This website loads its typeface from Google Fonts, which means Google sees the request.
If we change this policy we will update the date at the top, and tell workspace owners by email if the change is significant.
