Privacy Policy - Bugy

1. Introduction

Welcome to Bugy. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our visual feedback and website annotation service.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, and profile picture when you create an account or sign in via OAuth providers (Google, GitHub).
Workspace Data: Workspace names, slugs, and settings you configure.
Feedback Content: Comments, annotations, screenshots, and attachments you create within the platform.
Communication: Messages you send to us for support or inquiries.

2.2 Information Collected Automatically

Usage Data: Information about how you interact with our service, including pages visited and features used.
Device Information: Browser type, operating system, and device identifiers.
Log Data: IP addresses, access times, and referring URLs.
Cookies: We use cookies and similar technologies for authentication and preferences.

3. How We Use Your Information

We use collected information to:

Provide, maintain, and improve our services
Process your account registration and manage your subscription
Enable collaboration features and team functionality
Send service-related communications and updates
Respond to your requests and provide customer support
Analyze usage patterns to enhance user experience
Detect, prevent, and address technical issues and security threats
Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

Workspace Members: Other users in your workspace can see your profile and contributions.
Service Providers: Third-party vendors who assist in operating our service (hosting, payment processing, analytics).
Legal Requirements: When required by law or to protect our rights and safety.
Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties for marketing purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

Access: Request a copy of your personal data we hold.
Rectification: Request correction of inaccurate data.
Erasure: Request deletion of your personal data ("right to be forgotten").
Portability: Request a machine-readable copy of your data.
Restriction: Request restriction of processing in certain circumstances.
Objection: Object to processing based on legitimate interests.
Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at privacy@bugy.app.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable data protection laws.

9. Third-Party Services

Our service integrates with the following third-party services:

Authentication: Google OAuth, GitHub OAuth
Payment Processing: Polar.sh for subscription management
Database: Neon (PostgreSQL hosting)
File Storage: For media and attachments

Each third-party service has its own privacy policy governing the use of your information.

10. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@bugy.app