Summary: We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights regarding your personal information.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address
- Password (hashed using Argon2id)
- Account creation date
- IP address and user agent (for security logging)
1.2 Usage Data
We collect information about how you use our services:
- API request logs (timestamp, endpoint, response status)
- Code execution metadata (language, execution time, resource usage)
- Authentication events (login attempts, token refreshes)
- Device and browser information
2. How We Use Your Information
We use your data to:
- Provide and maintain our services
- Authenticate users and secure accounts
- Monitor and improve service performance
- Detect and prevent security incidents
- Communicate service updates and security alerts
- Comply with legal obligations
3. Data Security
We implement industry-standard security measures:
Encryption at Rest
AES-256 encryption
Encryption in Transit
TLS 1.3
Password Hashing
Argon2id
Access Controls
RBAC with MFA
4. Data Retention
We retain your data for as long as your account is active. Upon account deletion:
- Account data is deleted within 30 days
- Audit logs are retained for 1 year (legal compliance)
- Anonymized usage statistics may be retained indefinitely
5. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Export your data
- Object to data processing
- Withdraw consent
6. Third-Party Services
We use the following third-party services:
- Stripe — Payment processing (PCI DSS compliant)
- GitHub/Google — OAuth authentication (optional)
- Postmark — Email delivery
7. Contact Us
If you have questions about this Privacy Policy, please contact us:
Project Talos Security Team
privacy@talos.dev
We aim to respond to all privacy inquiries within 48 hours.