Privacy Policy
Last updated: December 2024
Introduction
At Drilo ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our engineering productivity platform and related services.
By using Drilo, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Personal Information
We may collect the following personal information:
- Name and email address when you create an account
- Company information and team details
- Payment information (processed securely by our payment providers)
- Communication preferences and marketing consent
Usage Data
We automatically collect certain information about your use of our platform:
- Log data (IP address, browser type, access times)
- Usage patterns and feature interactions
- Performance data and error reports
- Device information and technical specifications
Integration Data
When you connect third-party services (GitHub, Linear, Slack, etc.), we may access:
- Repository information and commit data
- Issue and project management data
- Team communication data (with your consent)
- Integration-specific metadata
How We Use Your Information
We use the collected information for the following purposes:
- Provide and maintain our engineering productivity platform
- Generate insights and analytics about your team's performance
- Send important updates, security notices, and support communications
- Process payments and manage your subscription
- Improve our services and develop new features
- Provide customer support and respond to inquiries
- Comply with legal obligations and enforce our terms
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- Service Providers: With trusted third-party services that help us operate our platform (payment processors, hosting providers, analytics services)
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Consent: With your explicit consent for specific purposes
Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit and at rest
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Secure development practices and code reviews
- Employee training on data protection and privacy
Your Rights and Choices
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal data
- Portability: Export your data in a machine-readable format
- Objection: Object to certain processing activities
- Withdrawal: Withdraw consent where processing is based on consent
Data Retention
We retain your personal data for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Improve our services and develop new features
When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
Cookies and Tracking
We use cookies and similar technologies to:
- Remember your preferences and settings
- Analyze website usage and performance
- Provide personalized content and features
- Ensure security and prevent fraud
You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our platform.
International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to registered users
- Displaying a notice in our platform
Your continued use of our services after such changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
Email: privacy@drilo.com
Address: Drilo Inc., [Address], [City], [State] [ZIP]
Data Protection Officer: dpo@drilo.com