Privacy Policy
Last updated: December 2024
1. Information We Collect
We collect the following types of information:
- Account Information: Email address, name (via authentication provider)
- Code Content: Your files are encrypted at rest using per-user keys. We store encrypted file content and metadata (paths, timestamps, change summaries).
- Usage Data: Snapshots created, storage used, feature usage
- Technical Data: IP address, browser type, device information
2. How We Use Your Information
- To provide and maintain the Service
- To process payments and manage subscriptions
- To communicate with you about the Service
- To improve and optimize the Service
- To detect and prevent fraud or abuse
Note: We never sell your data or use your code for training AI models.
3. Data Storage and Security
Your code content is encrypted using AES-256-GCM encryption with per-user keys. Data is stored on secure cloud infrastructure with encryption at rest and in transit. We implement industry-standard security practices to protect your data.
While we have the technical capability to decrypt data for support or legal compliance, we do not access customer code except when required by law or explicitly requested by you. This is the same model used by GitHub and most developer tools.
4. Data Retention
We retain your data for as long as your account is active. When you delete your account, we will delete your data within 30 days, except where required to retain for legal purposes.
5. Third-Party Services
We use the following third-party services:
- Clerk: Authentication and user management
- Polar: Payment processing and subscriptions
- Anthropic: AI-powered code summaries (opt-in)
- Simple Analytics: Privacy-friendly analytics
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
- Object to certain processing
7. Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.
8. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.
10. Changes to This Policy
We may update this policy at any time. We will notify you of significant changes via email or through the Service.
11. Contact
For privacy-related questions, contact us at hi@getmrq.com