Privacy Policy
Last updated: June 2026
1. Information We Collect
Account Information
When you sign in via enterprise email, GitHub OAuth, or Google OAuth, we receive your email address and basic profile information (name, avatar) from the identity provider. We do not store login passwords.
Usage Data
We collect API usage metrics including request counts, session durations, and CDP connection activity. This data is used for billing, rate limiting, and service improvement.
Browser Session Data
Browser sessions are ephemeral. Cookies, localStorage, and other browsing data stored in Contexts are persisted at your discretion. You may delete Contexts at any time.
Payment Information
Payment processing is handled by Stripe. We do not store full credit card numbers. Stripe may collect payment details in accordance with their privacy policy.
2. How We Use Information
We use the collected information to:
- Provide, maintain, and improve the Service
- Process billing and enforce plan limits
- Monitor for abuse and enforce our Terms of Service
- Send service-related communications (e.g., billing notifications)
- Analyze usage patterns to improve infrastructure and features
3. Data Storage & Retention
Account information is retained while your account is active. API usage logs are retained for 90 days for billing purposes. Browser session data in Contexts is retained until you delete the Context. We use PostgreSQL for persistent storage and Redis for ephemeral state.
4. Data Sharing
We do not sell your personal data. We may share information:
- With service providers (e.g., Stripe for payments, hosting providers)
- When required by law or to protect our rights
- In connection with a business transfer (merger, acquisition)
5. Security
We implement reasonable security measures including:
- TLS encryption for all API traffic
- API key-based authentication for all endpoints
- Database access restricted to localhost
- Regular security updates and dependency audits
6. Your Rights
You may:
- Request a copy of your account data
- Delete your account and associated data
- Delete individual Contexts and their stored browsing data
7. Cookies
Our web application uses session cookies for authentication. We do not use tracking cookies or third-party analytics scripts. The browser sessions you create are isolated from our infrastructure and do not share cookies with our services.
8. Children’s Privacy
The Service is not intended for users under 16. We do not knowingly collect information from children.
9. International Transfers
Your data is stored on servers located in the United States (Atlanta). By using the Service, you consent to this transfer and storage.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Continued use after changes constitutes acceptance.
11. Contact
For privacy-related inquiries: [email protected]