Privacy Policy | Connectory

1. Introduction

Connectory, a product of Tactical Edge AI ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use SlopBuster and our related services.

By using SlopBuster, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the service.

2. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

Contract: Processing necessary to perform our contract with you (providing the SlopBuster service, account management, payment processing)
Consent: Where you have given explicit consent for specific processing activities (analytics cookies, marketing communications)
Legitimate Interest: Processing necessary for our legitimate business interests (service improvement, security monitoring, fraud prevention) where those interests are not overridden by your rights
Legal Obligation: Processing necessary to comply with applicable laws and regulations

3. Information We Collect

3.1 Information You Provide

Account information (email address, name, organization)
GitHub or GitLab account information when you connect our app
Repository access permissions you grant
Payment information (processed securely by our payment providers)
Communications with our support team

3.2 Information We Collect Automatically

Usage data (features used, actions taken within the service)
Device information (browser type, operating system)
Log data (IP address, access times, pages viewed)
Cookies and similar tracking technologies

3.3 Code and Repository Data

When you install SlopBuster on your repositories, we access code changes in pull requests to provide our code review service. We process this data to generate quality assessments and suggestions. We do not store your source code permanently; it is processed in memory and discarded after analysis.

4. How We Use Your Information

To provide, operate, and maintain SlopBuster services
To analyze code and provide quality assessments, suggestions, and reviews
To improve and personalize your experience
To communicate with you about updates, security alerts, and support
To process payments and manage subscriptions
To comply with legal obligations
To detect, prevent, and address technical issues or abuse

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: Third-party vendors who assist in operating our service (hosting, analytics, payment processing)
Legal Requirements: When required by law or to protect our rights
Business Transfers: In connection with a merger, acquisition, or sale of assets
With Your Consent: When you explicitly agree to share information

6. Data Security

We implement industry-standard security measures to protect your information, including:

Encryption of data in transit (TLS 1.3) and at rest (AES-256)
Regular security audits and penetration testing
Access controls and authentication mechanisms
SOC 2 Type II compliance (Enterprise plans)
No permanent storage of source code
Role-based access controls and principle of least privilege
Automated vulnerability scanning and patch management

7. Data Retention

We retain your data according to the following schedule:

Account information: Retained while your account is active, deleted within 30 days of account closure
Source code data: Processed in real-time and not stored permanently
Review history and analytics: Retained for up to 24 months to provide historical insights
Payment records: Retained for 7 years as required by tax and financial regulations
Support communications: Retained for up to 36 months
Server logs: Retained for 90 days

You may request deletion of your data at any time by contacting us at privacy@connectory.ai.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the GDPR:

Right of Access (Art. 15): Request a copy of the personal data we hold about you
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data
Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
Right to Restrict Processing (Art. 18): Request limitation of processing in certain circumstances
Right to Data Portability (Art. 20): Request your data in a structured, machine-readable format
Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent (Art. 7): Withdraw consent at any time where processing is based on consent
Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority

We will respond to GDPR requests within 30 days. To exercise these rights, contact our Data Protection Officer at dpo@connectory.ai.

9. Your Rights Under CCPA

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, and disclose
Right to Delete: Request deletion of your personal information, subject to certain exceptions
Right to Opt-Out: Opt out of the sale or sharing of your personal information
Right to Correct: Request correction of inaccurate personal information
Right to Limit Use of Sensitive Data: Limit how we use your sensitive personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

We do not sell your personal information. To exercise your CCPA rights or opt out of data sharing, visit our Cookie Preferences page or contact us at privacy@connectory.ai.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, primarily the United States. We ensure appropriate safeguards are in place to protect your data, including:

Standard Contractual Clauses (SCCs) approved by the European Commission for EU data transfers
Data Processing Agreements with all sub-processors
Regular assessment of third-country data protection adequacy

11. Children's Privacy

SlopBuster is not intended for users under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide additional notice via email or in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, please contact us:

Data Protection Officer: dpo@connectory.ai
Privacy Inquiries: privacy@connectory.ai