Privacy Policy

Information we collect

• Account information. Your name and email address, and — if you sign in with Google or GitHub — the basic profile information those providers share (name, email, avatar).
• Configuration data. The projects, environments, keys, and values you create and store in the Service.
• Usage data. Counts and metadata for reads of your configuration through our public API, which we meter to enforce plan limits and produce usage reporting.
• Billing information. Subscription and plan status from our payment provider. Card details are handled by the payment provider; we do not receive or store full payment card numbers.
• Technical data. IP address and request metadata, and cookies used to keep you signed in and to protect our forms from abuse.

How we use information

• To provide, maintain, and secure the Service.
• To authenticate you and keep your session active.
• To meter usage and enforce the limits of your plan.
• To process subscriptions, payments, and renewals.
• To send transactional email such as verification, invitations, and account notices.
• To detect, prevent, and respond to fraud, abuse, and security incidents.

Cookies

We use a strictly necessary session cookie to keep you signed in, and a bot-protection challenge on public forms. We do not use third-party advertising or cross-site tracking cookies.

Service providers

We share data with the following providers only to operate the Service, each acting on our behalf:

• Cloudflare — hosting, database, edge caching, and usage analytics.
• Polar — subscription billing and payment processing.
• Resend — delivery of transactional email.
• Google and GitHub — optional single sign-on, if you choose to use it.

How we share information

We do not sell your personal information. We share it only with the providers listed above, when required by law or legal process, or to protect the rights, safety, and security of BetterConfig, our users, and the public. If we are involved in a merger or acquisition, your information may transfer as part of that transaction.

Data retention

We retain your information for as long as your account is active. When you delete your account, we delete or anonymize your personal data and configuration within a reasonable period, except where we must retain certain records (such as billing history) to comply with legal obligations.

Security

We protect data in transit with encryption, scope access tokens to the minimum required, and limit access to systems that store your data. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard measures.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these from your account settings, or by contacting us at the address below.

International transfers

The Service runs on a global network, so your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for these transfers.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice.

Contact

Questions about this policy or your data? Email us at privacy@betterconfig.dev.