← Back to DataFoundry

Privacy Policy

Last updated: April 2026

1. Information We Collect

We collect information you provide directly (name, email, organization name), information generated through your use of the Service (projects, work items, audit logs, annotation metadata), and technical data (IP addresses, browser type, usage patterns via analytics).

2. How We Use Your Information

We use your information to provide and improve the Service, communicate with you about your account and updates, send transactional emails (account setup, trial notifications), analyze usage patterns to improve the platform, and maintain the security and integrity of the Service.

3. Data Storage and Security

Your data is stored on servers located in the United States. We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, role-based access controls, and comprehensive audit logging. API keys are encrypted using AES-256 before storage.

4. Data Sharing

We do not sell your data. We share data only with third-party service providers necessary to operate the Service (database hosting, email delivery, error monitoring), and only as required by law or to protect our legal rights.

5. Sub-Processors

Key sub-processors include: Supabase (database hosting), Resend (transactional email), Upstash (rate limiting), and Sentry (error monitoring). A full sub-processor list is available on request.

6. Analytics

We use PostHog for product analytics to understand how users interact with the platform. PostHog analytics data is used only to improve the product and is not shared with third parties for advertising purposes.

7. Data Retention

We retain your data for as long as your account is active. After account termination, data is retained for a minimum of 12 months to allow reactivation or export. After this period, data may be permanently deleted.

8. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data, data portability, and to object to certain processing activities. To exercise these rights, contact us at team@datafoundry.app.

9. Cookies

We use essential cookies for authentication (session management) and analytics cookies (PostHog) to understand platform usage. We do not use advertising cookies.

10. Contact

For privacy inquiries, contact us at team@datafoundry.app. For enterprise Data Processing Agreements, see our DPA page.