Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use and protect information when you use our software-as-a-service platform (the "Service"). We collect the minimum data required to operate the Service and give you control over what you share.

2. Data We Collect

We categorise data as follows. All items marked * are required only for account operation:

• Account Data* – email, name (optional), authentication identifiers.
• Organisation & Project Metadata – names, identifiers, roles, membership relations.
• Configuration Data – collections, dispatcher/listener task definitions, flows, test assertions and environment variable keys (but not their secret values when stored locally or in CI).
• Operational Logs – minimal diagnostic events to ensure reliability (request IDs, timestamps, execution outcomes). We intentionally avoid storing raw payload bodies unless explicitly enabled.
• Voluntary Feedback – comments, survey responses or support messages you choose to send us.

3. How We Use Data

• Provide, maintain and improve the Service.
• Authenticate users and authorise access.
• Operate core functionality (projects, collections, flows).
• Communicate essential product or security notices.
• Respond to support requests and product feedback.
• Monitor abuse, protect platform integrity and security.
• Generate high‑level, aggregated product metrics (never for re‑sale or ad targeting).

4. Information Sharing

We do not sell your personal information. We share data only with trusted sub‑processors necessary to run the Service (infrastructure, analytics, authentication) bound by data protection agreements, or if required by law.

5. Data Security

We apply industry-standard measures: encryption in transit, least privilege access, auditability of administrative actions, and segregation of customer data. Secrets (API keys, cloud credentials) used by the CLI remain in your execution environment and are never transmitted to us unless you explicitly add them to an environment stored in the UI.

6. Data Retention & Deletion

Configuration data persists while your account or organisation is active. You may request deletion of collections, projects or your account. Backups roll out of rotation on a scheduled cycle. We will also delete data that becomes no longer necessary for the purposes stated.

7. Your Rights

• Access and obtain a copy of your personal data.
• Request correction or deletion.
• Object to or restrict certain processing.
• Export data where technically feasible.
• Withdraw consent for optional features.

You can exercise most rights via in‑product settings or by contacting us.

8. Children

The Service is not directed to individuals under 16. We do not knowingly collect data from children. If you believe we have collected such data, contact us for removal.

9. Changes to This Policy

We may update this Policy to reflect product, legal or operational changes. Material updates will be announced via the platform or email. The revision date appears at the top of this page.

Contact