1. Data Controller
1402 Celsius Ltd
1A Aton Street, Building 6
Plovdiv, 4002, Bulgaria
Registration #: 207314767
VAT: BG 207314767
Email: info@1402celsius.com
2. What Data We Collect
2.1 Information You Provide
- Account Information: Email address, name (optional), company name (optional)
- Payment Information: Processed by Stripe - we don't store credit cards
- API Keys: Your OpenAI API key (encrypted)
- Support Communications: Emails you send us
2.2 Information We Collect Automatically
- Usage Data: Number of releases, feature usage
- Log Data: IP address, browser type, access times
- Cookies: Session cookies, preference cookies (see Cookie Policy)
2.3 What We DON'T Collect
- ❌ Your source code
- ❌ Your repository contents
- ❌ Your deployment credentials
- ❌ Sensitive business data
3. How We Use Your Data
- To Provide Service: Process releases, generate changelogs
- To Bill You: Process payments via Stripe
- To Support You: Respond to support requests
- To Improve: Analyze usage patterns (anonymized)
- To Communicate: Service updates, security alerts
4. Data Sharing
We Share Data With:
- OpenAI: Commit messages for AI processing (see their privacy policy)
- Stripe: Payment processing (PCI compliant)
- Netlify: Website hosting
We DON'T Share With:
- ❌ Advertisers
- ❌ Data brokers
- ❌ Marketing companies
- ❌ Your competitors
5. Data Security
- ✅ TLS/SSL encryption in transit
- ✅ Encrypted storage for sensitive data
- ✅ Regular security audits
- ✅ Access controls and monitoring
- ✅ No plain-text password storage
Honest Note: We're a small company, not Fort Knox. We use industry-standard security but can't guarantee 100% security (no one can).
6. Data Retention
- Account Data: Until you delete your account
- Usage Logs: 90 days
- Payment Records: 7 years (legal requirement)
- Support Tickets: 2 years
- Marketing Emails: Until you unsubscribe
7. Your Rights (GDPR)
As an EU company, we comply with GDPR. You have the right to:
- Access: Request copy of your data
- Rectification: Correct inaccurate data
- Erasure: Delete your data ("right to be forgotten")
- Portability: Export your data
- Object: Opt-out of processing
- Restrict: Limit how we use your data
To exercise these rights, email: privacy@1402celsius.com
8. International Transfers
Your data may be transferred to:
- USA: OpenAI API processing
- USA: Stripe payment processing
- EU: Our servers (Bulgaria)
We ensure appropriate safeguards via standard contractual clauses.
9. Children's Privacy
ReleasePilot is not for users under 16. We don't knowingly collect data from children. If you're under 16, please don't use our service.
10. Changes to This Policy
We may update this policy. We'll notify you via:
- Email (for significant changes)
- Website banner
- Update date at top of page
12. Supervisory Authority
You can lodge complaints with:
Commission for Personal Data Protection (Bulgaria)
Address: 2, Prof. Tsvetan Lazarov Blvd., Sofia 1592
Website: www.cpdp.bg