Privacy policy

1. What we collect

Account data you give us: your name, work email address, company name and the password you choose.

Product data your customers generate inside your own application and send to Driftly as events — for example that a signup completed or a data source was connected.

Usage data about the workspace itself: which workflows were edited, by whom and when.

2. Why we process it

To run the service you subscribed to: triggering onboarding steps, sending the emails you configured and drawing your activation dashboard.

To keep the service secure and to investigate abuse.

To bill you, and to contact you about the service itself. Marketing email is separate and always opt-in.

3. Who else sees it

Sub-processors that make the service work — hosting, email delivery and payment processing. Each is bound by a data processing agreement.

Nobody buys your data, and it is never sold or rented on.

4. Where it is stored

In the region you choose when the workspace is created. EU workspaces stay in the EU.

Backups are encrypted and kept for 30 days.

5. How long we keep it

Account data for as long as the workspace exists, and 30 days after it is deleted.

Event data for the retention window of your plan — 7, 90 or 365 days.

6. Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to privacy@driftly.example and we answer within 30 days.

If you are in the EU or the UK you may also complain to your data protection authority.

7. Cookies

A session cookie keeps you signed in. An optional analytics cookie helps us see which parts of the product get used; it is off until you allow it.

8. Changes

If this policy changes in a way that affects you, we say so in the product and by email at least 30 days before it takes effect.