Privacy Policy
Version: draft 0.1 Effective: date
Operator: Evgeny Shevtsov, country, legal entity and registered address ("we", "us"). Contact: [email protected].
1. Who we are
The operator named above is the controller of the personal data described here. Contact for privacy questions: [email protected]. Add the representative in the EU/UK or a data protection officer if the law requires one.
2. The short version
The Service stores operational data only. It does not receive the contents of your databases or your database passwords: those stay in your environment, and the open-source runner works there. We do not sell personal data and do not use it for advertising.
3. What we collect and why
| Data | Purpose | Basis check with counsel |
|---|---|---|
| Account: e-mail address, name, and the identifier given by Google or GitHub when you sign in with them | Create and secure your account, sign you in | Contract |
| Consent records: the versions of the Terms and this Policy you accepted, the time | Prove what you agreed to | Legal obligation / legitimate interest |
| Organization and operational state: names or identifiers of organizations you manage, status of moves and agents, plan and usage counts | Provide the panel, billing by organization | Contract |
| Statistics and monitoring: metrics that the runner and agents report (latency, throughput, errors, versions); no row contents | Show statistics, send alerts, operate the Service | Contract |
| Access requests: e-mail, company, size, description you type into the form | Answer your request | Legitimate interest / steps before a contract |
| Security and server logs: IP address, time, user agent, request path, outcome | Protect and debug the Service, prevent abuse | Legitimate interest |
| Billing: company name, invoicing address, tax identifier, invoices | Invoice and meet accounting duties | Contract, legal obligation |
| Support correspondence | Answer you | Contract / legitimate interest |
4. Sign-in with Google and GitHub
If you choose Google or GitHub, we receive from them your e-mail address, name and an account identifier, and nothing else, unless you grant more. We do not read your repositories, files or contacts. You can sign in with an e-mail link instead.
5. Cookies
We use only the cookies needed to keep you signed in and to protect forms (session and security cookies). We do not use advertising or cross-site tracking cookies. The public website stores your light or dark theme choice in your browser.
6. Consent
When you register you tick separate boxes to accept the Terms and this Policy. You can withdraw consent to optional processing at any time by writing to us; this does not affect processing already done, and may mean we cannot provide the Service.
7. Who receives data
Only service providers that we need to run the Service, bound by contract: hosting provider, e-mail delivery provider, payment and accounting providers. Google and GitHub, if you sign in with them. Authorities, where the law requires. We keep a current list and give it on request.
8. Transfers outside your country
Data is stored in region. If it is transferred to another country, we use the mechanism required, for example standard contractual clauses.
9. How long we keep it
Account and operational data: while your account exists, then deleted within 30 days of closing it. Consent records and invoices: as long as the law requires, period. Server logs: period. Access requests that do not lead to an account: period.
10. Security
Access to the Service is over TLS; secrets are stored hashed or encrypted; access by our staff is limited and logged; the runner and agents authenticate with tokens and certificates and can be revoked. No system is perfectly secure; we notify affected users of a breach as the law requires.
11. Your rights
Depending on where you live, you can ask us to access, correct, delete, restrict or export your personal data, object to processing, withdraw consent, and complain to a supervisory authority name for the operator's country. Write to [email protected]; we answer within 30 days.
12. Children
The Service is for businesses and is not directed at children.
13. Changes
We will tell you about material changes by e-mail or in the panel and ask for acceptance again where the law requires. Earlier versions are kept.