Data practice

Privacy Notice

1. Information we process

Depending on the product, we may process account identifiers, contact details, workspace content you submit, product settings, support messages, subscription and entitlement references, security events, device/browser metadata, and service usage. Payment card details are collected by Paddle, not by us.

2. Why we process it

We use information to provide and secure products, authenticate users, isolate workspaces, fulfill purchases, respond to requests, prevent abuse, maintain records, comply with law, and improve reliability. Where required, we rely on contract, legitimate interests, consent, or legal obligation as the applicable basis.

3. Service providers

Cloudflare provides hosting, networking, security, and database infrastructure. Paddle acts as merchant of record for checkout, tax, receipts, subscriptions, and buyer support. Google Gemini may process prompts for explicitly AI-assisted features. Product-specific notices will identify any additional integration before it is enabled.

4. Sharing

We do not sell personal information. We share it with processors only as needed to operate a requested feature, protect the service, complete a transaction, or comply with a valid legal request. We do not use private workspace content for advertising.

5. International transfers

Providers may process information outside your country. Where required, transfer safeguards are used by the relevant controller or processor. Paddle separately explains its processing during checkout and buyer support.

6. Retention and security

We retain information only for the service, legal, security, and recovery periods that apply to it, then delete or de-identify it. Controls include encryption in transit, secret stores, signed webhooks, least-privilege credentials, and tenant-scoped authorization. No system can guarantee absolute security.

7. Your choices and rights

You may request access, correction, deletion, portability, restriction, or objection where available under applicable law. You may withdraw consent without affecting earlier lawful processing. We may need to verify your identity and retain limited records when law requires.

8. Children

Products are not directed to children below the minimum digital-consent age applicable in their country. We do not knowingly open paid accounts for children without required authorization.

9. Contact

Send privacy questions or rights requests through our contact form and select “Privacy.” You may also complain to the data-protection authority available to you.