Privacy Policy

1. Introduction

Flagit ("we", "us", or "our") operates the Flagit website at flag-it.dev, the customer portal at portal.flag-it.dev, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when using our Service:

• Account Information: Email address, password, first name, last name, and company name when you register for an account on our portal.
• Registration Information: Email address and optionally company name when you register for our service.
• Payment Information: When you purchase a license, payment is processed by Stripe. We receive your email, name, and transaction details, but we do not store your credit card information.
• Communications: Information you provide when contacting us via email or support channels.

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain information:

• Analytics Data: We use Google Analytics to collect information about how you interact with our website, including pages visited, time spent, and navigation patterns. This data is anonymized and aggregated.
• Log Data: Our servers may automatically log information such as your IP address, browser type, operating system, and referring URLs.
• Local Storage: We use browser local storage to remember your preferences (such as theme settings) and maintain your session when logged in.

3.3 Information We Do Not Collect

Flagit is a self-hosted feature flag solution. When you deploy Flagit on your own servers, all feature flag data, user contexts, and evaluation data stays on your infrastructure. We do not have access to this data.

4. How We Use Your Information

We use the collected information for the following purposes:

• Provide the Service: To create and manage your account, process license purchases, and deliver our software.
• Communication: To send you important updates about your account, license expiration notices, and respond to your inquiries.
• Improvement: To analyze usage patterns and improve our website, documentation, and services.
• Security: To detect and prevent fraud, abuse, and security incidents.
• Legal Compliance: To comply with applicable laws and regulations.

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on:

• Contract: Processing necessary to provide the Service you requested (account creation, license delivery).
• Consent: Processing based on your consent (analytics cookies, marketing communications).
• Legitimate Interest: Processing for our legitimate interests (improving services, security) that do not override your rights.
• Legal Obligation: Processing necessary to comply with legal requirements.

6. Data Sharing and Third Parties

We may share your information with the following third parties:

We do not sell your personal data to third parties. We may disclose information if required by law or to protect our rights.

7. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records)
• Resolve disputes and enforce our agreements

Account data is retained for the duration of your account. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request restriction of processing of your personal data.
• Portability: Request transfer of your data to another service.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at support@flag-it.dev.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold.
• Right to delete personal information held by businesses.
• Right to opt-out of the sale of personal information. Note: We do not sell personal information.
• Right to non-discrimination for exercising your CCPA rights.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, where applicable.

11. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS)
• Secure password hashing (bcrypt/argon2)
• Regular security updates and monitoring
• Access controls and authentication

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

12. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: