[{"data":1,"prerenderedAt":2077},["ShallowReactive",2],{"services:nav":3,"team:nav":45,"legal-privacy":60},[4,15,25,35],{"path":5,"title":6,"description":7,"outcome":8,"icon":9,"image":10},"\u002Fconsulting\u002Fsoftware-development","Software development","Applications and APIs built properly — designed, architected and shipped by someone who has done it at scale.","Something to build, without the team or the expertise to build it.","app-development",{"url":11,"photographer":12,"source":13,"sourceUrl":14},"\u002Fimages\u002Fconsulting\u002Fsoftware-development.jpg","Daria Nepriakhina","Unsplash","https:\u002F\u002Funsplash.com\u002Fphotos\u002FzoCDWPuiRuA?utm_source=intracia&utm_medium=referral",{"path":16,"title":17,"description":18,"outcome":19,"icon":20,"image":21},"\u002Fconsulting\u002Fdata-extraction-and-recovery","Data extraction & recovery","Getting data out of systems that don't want to give it up — undocumented formats, dead platforms, failing media and legacy databases.","Data trapped in a system nobody supports any more.","data",{"url":22,"photographer":23,"source":13,"sourceUrl":24},"\u002Fimages\u002Fconsulting\u002Fdata-extraction-and-recovery.jpg","Patrick Lindenberg","https:\u002F\u002Funsplash.com\u002Fphotos\u002F1iVKwElWrPA?utm_source=intracia&utm_medium=referral",{"path":26,"title":27,"description":28,"outcome":29,"icon":30,"image":31},"\u002Fconsulting\u002Fdeveloper-and-ai-tooling","Developer & AI tooling","Libraries, SDKs, components and internal tooling — plus the MCP servers, agent integrations and evaluation harnesses that make AI features survive production.","A team blocked by something missing from a library they can't change.","libraries",{"url":32,"photographer":33,"source":13,"sourceUrl":34},"\u002Fimages\u002Fconsulting\u002Fdeveloper-and-ai-tooling.jpg","Luca Bravo","https:\u002F\u002Funsplash.com\u002Fphotos\u002FXJXWbfSo2f0?utm_source=intracia&utm_medium=referral",{"path":36,"title":37,"description":38,"outcome":39,"icon":40,"image":41},"\u002Fconsulting\u002Fweb-applications-and-sites","Web applications & sites","Designed and built end to end — customer-facing applications, product interfaces, marketing sites and documentation.","A web app or a site you'll still be proud of in three years.","web",{"url":42,"photographer":43,"source":13,"sourceUrl":44},"\u002Fimages\u002Fconsulting\u002Fweb-applications-and-sites.jpg","Domenico Loia","https:\u002F\u002Funsplash.com\u002Fphotos\u002FhGV2TfOh0ns?utm_source=intracia&utm_medium=referral",[46,53],{"path":47,"name":48,"role":49,"bio":50,"avatar":51,"pronouns":52},"\u002Fteam\u002Fdamien-guard","Damien Guard","Engineering & Operations","Damien has spent four decades writing software, most of it on the tools other developers depend on — .NET at Microsoft, the Atom editor at GitHub, SDKs and developer experience at Auth0, and the official MongoDB provider for Entity Framework Core.","\u002Fteam\u002Fdamien-guard.jpg","he\u002Fhim",{"path":54,"name":55,"role":56,"bio":57,"avatar":58,"pronouns":59},"\u002Fteam\u002Fkerry-guard","Kerry Guard","Marketing & Design","Kerry is CEO of MKG Marketing, the B2B SaaS and tech agency she co-founded in 2011, and leads marketing and web design at Intracia. She spends most of her time on the same problem from two directions: how technical products explain themselves to the people who have to buy them.","\u002Fteam\u002Fkerry-guard.jpg","she\u002Fher",{"id":61,"title":62,"body":63,"covers":2065,"description":2066,"extension":2067,"intro":2068,"meta":2069,"navigation":2070,"path":2071,"seo":2072,"status":2073,"stem":2074,"updated":2075,"__hash__":2076},"legal\u002Flegal\u002Fprivacy.md","Privacy Policy",{"type":64,"value":65,"toc":2020},"minimark",[66,83,111,114,119,153,161,165,171,177,184,188,191,201,222,228,233,236,262,273,276,279,309,312,316,319,331,334,338,341,344,359,365,369,393,396,400,403,406,412,422,426,429,433,436,442,452,456,468,471,475,481,485,488,492,495,515,521,525,542,548,551,555,559,562,565,618,624,627,633,643,649,653,735,745,755,762,768,778,784,788,791,805,815,819,903,907,947,951,1095,1099,1129,1135,1139,1145,1151,1157,1163,1167,1170,1347,1357,1364,1367,1371,1382,1419,1422,1466,1472,1475,1479,1486,1490,1493,1499,1503,1514,1533,1539,1543,1750,1757,1763,1769,1773,1776,1782,1792,1796,1799,1851,1854,1868,1878,1884,1890,1893,1897,1903,1909,1912,1922,1928,1938,1944,1950,1954,1963,1995,1998,2007,2011,2014],[67,68,69,70,74,75,82],"p",{},"When we say “we”, we mean ",[71,72,73],"strong",{},"Intracia Ltd",", ",[76,77,81],"a",{"href":78,"rel":79},"https:\u002F\u002Fportal.guernseyregistry.com\u002Fe-commerce\u002Fcompany\u002F124060",[80],"nofollow","registered in Guernsey",".\nWe're a small team. Damien Guard is accountable for data protection here, and answers privacy\nquestions himself.",[67,84,85,86,91,92,97,98,74,102,91,106,110],{},"We've written this to the standard of the ",[76,87,90],{"href":88,"rel":89},"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2016\u002F679\u002Foj",[80],"EU"," and\n",[76,93,96],{"href":94,"rel":95},"https:\u002F\u002Fwww.legislation.gov.uk\u002Feur\u002F2016\u002F679\u002Fcontents",[80],"UK"," GDPR, the strictest rules that apply to us.\nThat also covers Guernsey's Data Protection Law 2017 and the California Consumer Privacy Act. It sits\nalongside our ",[76,99,101],{"href":100},"\u002Fterms","Terms of Service",[76,103,105],{"href":104},"\u002Facceptable-use","Acceptable Use Policy",[76,107,109],{"href":108},"\u002Fdpa","Data Processing Agreement",".",[67,112,113],{},"Intracia is in early access. This describes what happens today.",[115,116,118],"h2",{"id":117},"_1-which-part-applies-to-you","1. Which part applies to you",[120,121,122,133,143],"ul",{},[123,124,125,128,129,110],"li",{},[71,126,127],{},"This website"," — intracia.com. Collects little. ",[76,130,132],{"href":131},"#3-this-website","Section 3",[123,134,135,138,139,110],{},[71,136,137],{},"Working with us directly"," — consulting. ",[76,140,142],{"href":141},"#4-if-you-work-with-us-directly","Section 4",[123,144,145,148,149,110],{},[71,146,147],{},"Intracia"," — the product. Holds your account and the content you manage. ",[76,150,152],{"href":151},"#5-intracia","Section 5",[67,154,155,156,160],{},"None of it is meant for children, and we don't knowingly collect data about anyone under 16. If we\nfind we have, we delete it. If you're a parent and think your child holds an account, write to\n",[76,157,159],{"href":158},"mailto:privacy@intracia.com","privacy@intracia.com",". We'll ask enough to be sure you're their parent\nand that the account is theirs, and no more.",[115,162,164],{"id":163},"_2-the-roles-we-play","2. The roles we play",[67,166,167,170],{},[71,168,169],{},"We're the controller"," of data about people who hold an account, visit this website, or work with us\ndirectly. Your name, email address, sign-in records and billing records are examples. That's what this\npolicy governs.",[67,172,173,176],{},[71,174,175],{},"We're a processor"," for the content our customers manage in the CMS. If you appear on a company's\nteam page that's hosted with us, that company decided to publish it, and we can't change or remove it\nwithout their instruction.",[67,178,179,180,110],{},"That doesn't leave you stuck. Write to us and we'll pass your request straight on, help them answer it\nproperly, and tell you we've done it. If you're not sure who to write to, send it to us anyway and\nwe'll make sure it reaches them. If they don't respond, you can complain about them to a data\nprotection authority. And a court order or other lawful demand reaches us directly, whatever our\ncontract with them says — see ",[76,181,183],{"href":182},"#when-the-law-compels-us","when the law compels us",[115,185,187],{"id":186},"_3-this-website","3. This website",[67,189,190],{},"Our pages are built in advance and served as static files from Cloudflare.",[67,192,193,196,197,200],{},[71,194,195],{},"Cloudflare processes your request"," — your IP address, the page you asked for, your browser — to\ndeliver the page and absorb attacks. Its edge logs hold that for up to ",[71,198,199],{},"24 hours",", then it's gone.",[67,202,203,211,212,216,217,221],{},[71,204,205,206],{},"We count visits with ",[76,207,210],{"href":208,"rel":209},"https:\u002F\u002Fposthog.com\u002Fprivacy",[80],"PostHog",", and nothing else. It runs in a mode\nthat stores nothing on your device and never learns who you are. The same tool reports errors a page\nruns into, so a form that breaks doesn't stay broken quietly.\n",[76,213,215],{"href":214},"#7-cookies-and-storage","Section 7"," has the detail, and how to switch it off. PostHog's requests go\nthrough ",[218,219,220],"code",{},"p.intracia.com",", which is our proxy — the data still ends up with PostHog in the United\nStates.",[67,223,224,227],{},[71,225,226],{},"Almost everything on the page comes from us."," Fonts and images are served from this domain. The\nexceptions are PostHog, and Cloudflare Turnstile on any page carrying our contact form.",[229,230,232],"h3",{"id":231},"our-contact-form","Our contact form",[67,234,235],{},"We get your name, email address, an optional organisation name, the kind of enquiry, and your message.\nWhat else we ask depends on the kind you pick:",[120,237,238,244,250,256],{},[123,239,240,243],{},[71,241,242],{},"CMS access"," — your site's URL, its framework, your Git provider, and where it's deployed",[123,245,246,249],{},[71,247,248],{},"Consulting"," — the kind of work you're asking about",[123,251,252,255],{},[71,253,254],{},"Privacy"," — the country you live in, which tells us which regulator you can go to",[123,257,258,261],{},[71,259,260],{},"Report abuse"," — where the content is, which is usually somewhere on somebody else's site",[67,263,264,267,268,272],{},[71,265,266],{},"The country is the only one we insist on",", and only on a privacy enquiry. It doesn't decide whether\nyou have rights: everyone gets the same baseline wherever they live. It tells us which authority you\ncan complain to, and what your own jurisdiction adds on top — ",[76,269,271],{"href":270},"#14-where-you-live","section 14",". We ask\nrather than work it out from your address, which would be less accurate and more intrusive. An abuse report is usually\nabout another person, so please send what we need to find the content and no more.",[67,274,275],{},"Your enquiry arrives as email carrying the country Cloudflare reads from your address at the edge. It's\nthere to help us answer, and your address itself doesn't travel with it. We use your message to reply,\nand won't add you to a mailing list because you sent one.",[67,277,278],{},"Between pressing Send and us reading it, 2 others are involved:",[120,280,281,292],{},[123,282,283,286,287,110],{},[71,284,285],{},"Cloudflare Turnstile"," checks a person filled the form in. Cloudflare gets your IP address,\nuser-agent, TLS fingerprint and the form's identifier. It acts as our processor protecting the form,\nand as its own controller when it uses the same signals to improve bot detection generally. What\nCloudflare does with those signals is set out in its ",[76,288,291],{"href":289,"rel":290},"https:\u002F\u002Fwww.cloudflare.com\u002Fturnstile-privacy-policy\u002F",[80],"Turnstile Privacy\nAddendum",[123,293,294,297,298,74,301,304,305,308],{},[71,295,296],{},"Resend"," delivers your enquiry as email to ",[218,299,300],{},"hello@",[218,302,303],{},"privacy@"," or ",[218,306,307],{},"abuse@",". Resend is in the\nUnited States, so an enquiry passes through there on the way to a mailbox in the EU, and keeps a\ncopy in its sending log for up to 30 days. Writing to those addresses yourself skips that leg.",[67,310,311],{},"Your enquiry isn't stored in any database of ours. It becomes an email, and the mailbox is the record.",[115,313,315],{"id":314},"_4-if-you-work-with-us-directly","4. If you work with us directly",[67,317,318],{},"Where we do consulting work for you, we hold what any working relationship produces: your name, role\nand email address, your organisation's details, the billing address and payment details for an invoice,\nthe invoices and accounting records behind them, and proposals, contracts and correspondence.",[67,320,321,322,325,326,330],{},"We're the ",[71,323,324],{},"controller"," of all of it. We hold it to do the work and be paid — a contract — and then,\nonce an invoice exists, because tax and company law require it. That's why billing records outlast\nalmost everything else in ",[76,327,329],{"href":328},"#11-how-long-we-keep-it","section 11",", and we can't delete them on request.\nIt all lives in Microsoft 365, on our tenant in the European Union.",[67,332,333],{},"We don't use it to market to you, don't enrich it from other sources, and it goes no further than our\naccountant and the authorities entitled to ask.",[115,335,337],{"id":336},"_5-intracia","5. Intracia",[67,339,340],{},"Our Intracia product manages a website you already have. Your pages and images live in your own\nsource repository and storage containers, and your site is built and served by whoever builds it\ntoday.",[67,342,343],{},"We do hold a working copy. To show you your content and keep a draft safe, we cache what we read from\nyour repository, so a copy sits in our database while you use the product. For pages and media, your\nrepository stays the record. One exception: where we built your site and run its infrastructure for\nyou, the repository and bucket may be ours, and your agreement says which applies.",[67,345,346,349,350,354,355,358],{},[71,347,348],{},"Some things live only here."," Schemas, templates, area definitions, queries and media attributes\nlike alt text are created inside Intracia to edit your site with, and exist nowhere else. Ask and\nwe'll send you a copy — at the end of a contract the ",[76,351,353],{"href":352},"\u002Fdpa#10-deletion-or-return","DPA"," puts that on a\n",[71,356,357],{},"30 day"," clock.",[67,360,361,364],{},[71,362,363],{},"A draft you haven't published is the exception."," We don't export those — publish it, or copy the\nMarkdown out of the editor.",[229,366,368],{"id":367},"_51-your-account","5.1 Your account",[120,370,371,374,377,380,387,390],{},[123,372,373],{},"your email address, and a display name where we have one",[123,375,376],{},"an avatar URL, where your sign-in provider supplies one",[123,378,379],{},"your GitHub handle, if you connect GitHub",[123,381,382,383],{},"the identity record your sign-in provider returned, listed in ",[76,384,386],{"href":385},"#sign-in-providers","section 9",[123,388,389],{},"your role, and which sites and organisations you belong to",[123,391,392],{},"when you last used the product, and your analytics choice",[67,394,395],{},"Microsoft sends neither a name nor a picture, so an account created that way may have only an address\nuntil you fill in the rest.",[229,397,399],{"id":398},"_52-signing-in","5.2 Signing in",[67,401,402],{},"You can sign in with an email address and password, with a link emailed to you, or through GitHub,\nLinkedIn, Facebook or Microsoft. Google is coming shortly. Passwords are handled by Supabase Auth and\nnever stored anywhere we can read them.",[67,404,405],{},"We record each sign-in and security event: the IP address and browser, which method you used, whether\nit worked and the error if it didn't, and the time. You can see this history in the product. Sign-in\naddresses go to IPGeolocation.io, which returns an approximate country, city, coordinates and network\noperator, cached for 24 hours.",[67,407,408,411],{},[71,409,410],{},"The address and browser are stripped after 90 days."," What's left lasts 12 months, then goes.\nCloudflare's rate limiter also counts requests over short windows; those counters are transient and no\naddress is kept.",[67,413,414,417,418,110],{},[71,415,416],{},"Cloudflare Turnstile guards the sign-in pages."," It runs invisibly: there is no puzzle, and usually\nnothing for you to click. To tell a person from a bot it receives your IP address, user agent and TLS\nfingerprint, along with an identifier for the page. Cloudflare acts as our processor here, and as its\nown controller when it uses the same signals to improve bot detection generally. What it does with\nthem is set out in its ",[76,419,421],{"href":289,"rel":420},[80],"Turnstile Privacy Addendum",[229,423,425],{"id":424},"_53-what-you-do-in-the-product","5.3 What you do in the product",[67,427,428],{},"So your team can see who changed what, we attribute work to your user ID: drafts and snapshots,\npublishes, pushes, content pulls, media uploads with alt text and tags, and the activity feed.\nInvitations record the address invited, who invited it, and whether it was accepted.",[229,430,432],{"id":431},"_54-what-you-connect","5.4 What you connect",[67,434,435],{},"Connecting a Git provider, bucket or deployment target stores the credential — encrypted, readable\nonly by our servers — and the identity of the remote resource.",[67,437,438,441],{},[71,439,440],{},"Media goes to a storage bucket",", and whose depends on your arrangement. Either way we hold the\nrecord: filename, path, alt text, tags, size, uploader. Where the bucket is yours, closing your account\nhere doesn't reach into it. Where we host it for you, Cloudflare and GitHub are our sub-processors\nrather than yours, and you can ask us to switch at any time.",[67,443,444,445,448,449,110],{},"When your repository sends us a webhook, we log the delivery to troubleshoot it — the payload, and a\nnarrow allowlist of headers. Git payloads carry commit metadata including author names and email\naddresses. That's your content, held as your processor. We strip the payload and headers ",[71,446,447],{},"no later\nthan 30 days"," after delivery, and keep the bare record up to ",[71,450,451],{},"90 days",[229,453,455],{"id":454},"_55-support","5.5 Support",[67,457,458,459,462,463,467],{},"Anything you send us, and our replies, lives on ",[71,460,461],{},"Microsoft 365"," — Exchange Online for our mailboxes,\nOneDrive and SharePoint for documents. Our tenant is in the European Union.\n",[76,464,296],{"href":465,"rel":466},"https:\u002F\u002Fresend.com\u002Flegal\u002Fprivacy-policy",[80]," delivers the automated messages the product sends,\nand doesn't receive your replies.",[67,469,470],{},"Please send only what the problem needs. Anything you paste into an email is then in our mailbox as\nwell as in the product.",[229,472,474],{"id":473},"_56-payments","5.6 Payments",[67,476,477,480],{},[71,478,479],{},"We don't take payments through Intracia."," No card processing, no card details, no billing\naddresses. When we start charging, we'll name the payment processor here before it handles anything of\nyours.",[229,482,484],{"id":483},"_57-what-we-dont-want","5.7 What we don't want",[67,486,487],{},"We don't ask for special-category data about account holders — health, race, religion, political\nopinions, biometrics. Please keep it out of fields that don't call for it, including the AI assistant.",[229,489,491],{"id":490},"_58-what-your-team-can-see","5.8 What your team can see",[67,493,494],{},"Intracia is a shared workspace, so some of what we hold is visible to people you work with.",[120,496,497,503,509],{},[123,498,499,502],{},[71,500,501],{},"Administrators see your membership details"," — name, email address, role, and when you were last\nactive. That means administrators of the site you're a member of. Where an organisation manages that\nsite, it includes that organisation's administrators too.",[123,504,505,508],{},[71,506,507],{},"They also see roughly where you signed in from."," A site's team settings and an organisation's\nmember list show the city and country from your most recent sign-in, within the last 90 days. Not\nthe address itself: that's resolved on our servers and only the place name reaches the page. It's\nthere so someone responsible for a site can spot an account being used from somewhere it shouldn't\nbe. It isn't a location history, editors can't see it, and it's used for nothing else.",[123,510,511,514],{},[71,512,513],{},"Anyone who can edit a site sees what you did to it."," Drafts, publishes, uploads and the activity\nfeed are attributed to you by name.",[67,516,517,520],{},[71,518,519],{},"Organisations widen that circle."," Members of an organisation reach every site in it — content,\nmedia, drafts, history — without being added individually, and an organisation administrator holds\nadmin rights on all of them. That's a real disclosure, so it should be a decision rather than a\nsurprise.",[115,522,524],{"id":523},"_6-the-ai-features","6. The AI features",[67,526,527,528,533,534,537,538,541],{},"Only 2 features send data to a model, and they run when you ask them to. Both use Google's Gemma 3 12B,\nthrough Cloudflare AI Gateway and ",[76,529,532],{"href":530,"rel":531},"https:\u002F\u002Fopenrouter.ai\u002Fprivacy",[80],"OpenRouter",". ",[71,535,536],{},"Schema and template\nassistance"," sends the schema or template plus what you type. ",[71,539,540],{},"Alt-text suggestions"," send the address\nof the image rather than the image: the provider fetches it from the public location your own site\nalready serves it from, so no copy passes through us.",[67,543,544,547],{},[71,545,546],{},"A site can switch both off for everyone."," “AI assistance” in site settings turns them off for that\nsite and every member of it, enforced on our servers rather than by hiding buttons. They're on unless\nsomebody turns them off.",[67,549,550],{},"We don't train models on your content, and choose providers whose terms exclude training on data passed\nthrough their APIs. That second part is their promise, not ours, so what we stand behind is the\nchoosing and the checking. Nothing goes to a model in the background.",[115,552,554],{"id":553},"_7-cookies-and-storage","7. Cookies and storage",[229,556,558],{"id":557},"on-this-website","On this website",[67,560,561],{},"You can read this site without answering a cookie banner. Nothing is stored on your device by default.",[67,563,564],{},"The rules behind cookie banners — Article 5(3) of the ePrivacy Directive, and PECR in the UK — cover\nstoring information on your device and reading it back. We do neither: a visit is counted against a\nnumber worked out on PostHog's servers, described below. Our reading is that this falls outside those\nrules. The European Data Protection Board's Guidelines 2\u002F2023 reads Article 5(3) more broadly, so\ntreat this as our analysis.",[566,567,568,587],"table",{},[569,570,571],"thead",{},[572,573,574,578,581,584],"tr",{},[575,576,577],"th",{},"What we store",[575,579,580],{},"Where",[575,582,583],{},"Why",[575,585,586],{},"Basis",[588,589,590,605],"tbody",{},[572,591,592,596,599,602],{},[593,594,595],"td",{},"Your choice to stop counting, once you make it",[593,597,598],{},"Local storage",[593,600,601],{},"So it still applies after you leave the page",[593,603,604],{},"Strictly necessary",[572,606,607,610,613,616],{},[593,608,609],{},"A Cloudflare bot check, on any page with our contact form",[593,611,612],{},"Cookie",[593,614,615],{},"Telling a person from a bot",[593,617,604],{},[67,619,620,623],{},[71,621,622],{},"How we count a visit."," PostHog runs here in cookieless mode. Each event gets a number its servers\nwork out by hashing 5 things: our account, the day's secret, your IP address, your user-agent, and\nthis website's name. The secret is deleted each night, so the number can't be recreated and a reader\ntoday stays separate from the same reader yesterday. The site's name is in the hash too, so the same\nperson elsewhere gets a different number.",[67,625,626],{},"Your IP address goes into that hash, so PostHog receives it in the United States. What PostHog keeps is\nthe number — we've switched off IP storage on that project.",[67,628,629,632],{},[71,630,631],{},"What we learn."," Which pages you read, which links and buttons you click, where the pointer went\n— clicks, movement and scroll depth, as coordinates — and errors that break a page, with the message\nand the place in our code it came from. We're told the contact form went through, and not which kind\nof enquiry it was. Click tracking covers links and buttons only, so what you type into our contact\nform stays yours. Session replay is off here, in the code and in the project settings. Nothing here\nreaches the product: they're separate PostHog projects with no identifier that could join them.",[67,634,635,638,639,642],{},[71,636,637],{},"How to switch it off."," Choose ",[71,640,641],{},"Analytics"," in the footer. One click, every page, straight away. We\nkeep your answer in your browser so you only give it once, and clearing your storage starts counting\nagain. We honour Global Privacy Control and Do Not Track — if your browser sends either, PostHog stays\nunloaded.",[67,644,645,648],{},[71,646,647],{},"Our basis is legitimate interest",", not consent, because nothing is stored on your device. That gives\nyou a right to object whenever you like, without a reason, and the footer switch is exactly that.",[229,650,652],{"id":651},"in-intracia","In Intracia",[566,654,655,668],{},[569,656,657],{},[572,658,659,662,664,666],{},[575,660,661],{},"What",[575,663,580],{},[575,665,583],{},[575,667,586],{},[588,669,670,682,694,707,721],{},[572,671,672,675,677,680],{},[593,673,674],{},"Supabase authentication session",[593,676,612],{},[593,678,679],{},"Keeps you signed in",[593,681,604],{},[572,683,684,687,689,692],{},[593,685,686],{},"Theme and active site",[593,688,612],{},[593,690,691],{},"Remembers how you left the workspace",[593,693,604],{},[572,695,696,699,702,705],{},[593,697,698],{},"Analytics choice",[593,700,701],{},"Your account, on our servers",[593,703,704],{},"Remembers your answer on every device you sign in from",[593,706,604],{},[572,708,709,712,715,718],{},[593,710,711],{},"PostHog analytics and client-side error reports",[593,713,714],{},"Set by PostHog once enabled",[593,716,717],{},"Page and feature usage; errors in your browser",[593,719,720],{},"Consent",[572,722,723,726,729,732],{},[593,724,725],{},"PostHog session replay",[593,727,728],{},"Set by PostHog while a recording runs",[593,730,731],{},"A recording you started from the Support menu",[593,733,734],{},"Only when you start it",[67,736,737,740,741,744],{},[71,738,739],{},"PostHog starts switched off",", for everyone, everywhere. It's loaded opted out, a banner asks on your\nfirst sign-in, and nothing is captured until you answer. You can change your mind from ",[71,742,743],{},"Telemetry &\nerror reporting"," in Account > Settings, and a signed-in account's preference follows you between\ndevices.",[67,746,747,750,751,754],{},[71,748,749],{},"What “product analytics” covers."," The pages and features you use, what you click, how quickly pages\nrendered and how long their requests took, and as a heatmap, where you clicked and how far you\nscrolled. ",[71,752,753],{},"Your IP address is attached to those events",", which is where this differs from the\nwebsite. What it doesn't include is what you type.",[67,756,757,758,761],{},"Events are tied to your account identifier, and ",[71,759,760],{},"your email address is attached to the PostHog\nprofile"," when you sign in. So this isn't anonymous statistics: what you did in the product can be\ntraced back to you by anyone with access to our PostHog project. Nobody who isn't signed in gets a\nprofile at all.",[67,763,764,767],{},[71,765,766],{},"Server error reports follow the same answer."," The exception and its context go to PostHog so we can\nfix it. The report is anonymous — the route and the shape of the failure, never your user ID or email —\nand if you've declined analytics it isn't sent.",[67,769,770,773,774,777],{},[71,771,772],{},"Session replay only runs when you start it."," It lives in the Support menu. We tell you what it\ncaptures and link you here first, and you confirm. A blinking indicator stays on screen while it runs,\nit stops itself after ",[71,775,776],{},"10 minutes",", and you can stop it sooner. We watch a recording to find the fault\nyou were demonstrating, and for nothing else — not to profile you, not to report on how anyone is\nworking, and nobody outside the people building Intracia sees them.",[67,779,780,781,110],{},"A recording holds less than your screen in one way and more in another. Less, because text you type\ninto fields is masked before it leaves your browser. More, because the browser's console log travels\nwith it, so a message naming a file or failing request can appear though it was never on screen. The\nmasking isn't perfect, and the workspace exists to show you your content, so a recording can contain\nthat content. That's why it's yours to start. Recordings are kept ",[71,782,783],{},"30 days",[115,785,787],{"id":786},"_8-why-we-use-it-and-our-legal-basis","8. Why we use it, and our legal basis",[67,789,790],{},"Split the same three ways as the rest of this policy: this website, working with us directly, and our Intracia product.",[67,792,793,796,797,800,801,804],{},[71,794,795],{},"Support and legal requests run across all three."," We answer them from the correspondence itself, on\n",[71,798,799],{},"legitimate interests",", or on a ",[71,802,803],{},"legal obligation"," where the law requires an answer.",[67,806,807,810,811,110],{},[71,808,809],{},"Where we rely on legitimate interests below",", we've weighed them against your rights. You can object\nat any time — ",[76,812,814],{"href":813},"#13-your-rights","section 13",[229,816,818],{"id":817},"_81-this-website","8.1 This website",[566,820,821,834],{},[569,822,823],{},[572,824,825,828,831],{},[575,826,827],{},"Purpose",[575,829,830],{},"Data",[575,832,833],{},"Legal basis",[588,835,836,849,865,877,890],{},[572,837,838,841,844],{},[593,839,840],{},"Serve the page, and keep it up",[593,842,843],{},"Your IP address, the page you asked for, your browser, at Cloudflare's edge",[593,845,846],{},[71,847,848],{},"Legitimate interests",[572,850,851,854,857],{},[593,852,853],{},"Answer your enquiry",[593,855,856],{},"Contact form fields, and the country Cloudflare reads from your address",[593,858,859,861,862],{},[71,860,848],{},"; and where you're asking about hiring us, ",[71,863,864],{},"steps taken at your request before a contract",[572,866,867,870,873],{},[593,868,869],{},"Tell a person from a bot",[593,871,872],{},"IP address, user agent, TLS fingerprint, to Turnstile",[593,874,875],{},[71,876,848],{},[572,878,879,882,885],{},[593,880,881],{},"Count visits",[593,883,884],{},"Pages viewed, links and buttons clicked, heatmap coordinates, against a daily-rotating number",[593,886,887,889],{},[71,888,848],{}," — nothing is stored on your device, so on our reading no consent is needed, and you can switch it off in the footer",[572,891,892,895,898],{},[593,893,894],{},"Fix what breaks",[593,896,897],{},"The error, its message, and where in our code it came from, against the same number",[593,899,900,902],{},[71,901,848],{}," — the same footer switch turns this off too",[229,904,906],{"id":905},"_82-if-you-work-with-us-directly","8.2 If you work with us directly",[566,908,909,919],{},[569,910,911],{},[572,912,913,915,917],{},[575,914,827],{},[575,916,830],{},[575,918,833],{},[588,920,921,934],{},[572,922,923,926,929],{},[593,924,925],{},"Do consulting work, and invoice for it",[593,927,928],{},"Contact and billing details, proposals, correspondence",[593,930,931],{},[71,932,933],{},"Contract",[572,935,936,939,942],{},[593,937,938],{},"Keep financial records",[593,940,941],{},"Invoices and the data behind them",[593,943,944],{},[71,945,946],{},"Legal obligation",[229,948,950],{"id":949},"_83-intracia","8.3 Intracia",[566,952,953,963],{},[569,954,955],{},[572,956,957,959,961],{},[575,958,827],{},[575,960,830],{},[575,962,833],{},[588,964,965,977,991,1003,1018,1030,1043,1056,1068,1083],{},[572,966,967,970,973],{},[593,968,969],{},"Give you an account and run the product",[593,971,972],{},"Account and profile; authoring records",[593,974,975],{},[71,976,933],{},[572,978,979,982,987],{},[593,980,981],{},"Sign you in through a provider",[593,983,984,985],{},"The identity record it returns, listed in ",[76,986,386],{"href":385},[593,988,989],{},[71,990,933],{},[572,992,993,996,999],{},[593,994,995],{},"Authenticate you and keep accounts secure",[593,997,998],{},"Sign-in records, IP address, user agent",[593,1000,1001],{},[71,1002,848],{},[572,1004,1005,1008,1011],{},[593,1006,1007],{},"Show a team who has access, and roughly where from",[593,1009,1010],{},"Name, email, role, last-access time, sign-in city",[593,1012,1013,1015,1016],{},[71,1014,933],{}," and ",[71,1017,799],{},[572,1019,1020,1023,1026],{},[593,1021,1022],{},"Rate limiting and abuse prevention",[593,1024,1025],{},"Transient counters, account and site identifiers; Turnstile's signals on the sign-in pages — IP address, user agent, TLS fingerprint",[593,1027,1028],{},[71,1029,848],{},[572,1031,1032,1035,1038],{},[593,1033,1034],{},"Understand how the product is used",[593,1036,1037],{},"Events tied to your user ID — pages and features used, clicks, page and request timings, heatmap coordinates, and the IP address the event came from",[593,1039,1040,1042],{},[71,1041,720],{}," — off until you say yes",[572,1044,1045,1048,1051],{},[593,1046,1047],{},"Record your screen to show us a fault",[593,1049,1050],{},"A recording tied to your user ID",[593,1052,1053,1055],{},[71,1054,720],{}," — for that recording only",[572,1057,1058,1061,1064],{},[593,1059,1060],{},"Diagnose server failures",[593,1062,1063],{},"Server-side exception reports",[593,1065,1066],{},[71,1067,848],{},[572,1069,1070,1073,1076],{},[593,1071,1072],{},"Send transactional email",[593,1074,1075],{},"Email address, name, site name",[593,1077,1078,1080,1081],{},[71,1079,933],{}," \u002F ",[71,1082,799],{},[572,1084,1085,1088,1091],{},[593,1086,1087],{},"Run the AI features you invoke",[593,1089,1090],{},"The image, schema or text you submit",[593,1092,1093],{},[71,1094,933],{},[229,1096,1098],{"id":1097},"_84-where-we-got-it-if-not-from-you","8.4 Where we got it, if not from you",[120,1100,1101,1107,1117,1123],{},[123,1102,1103,1106],{},[71,1104,1105],{},"An invitation."," Somebody typed your email address in before you had an account. The record keeps\nwho invited you and when. If it's unwelcome, tell us and we'll delete the address rather than leave\nit pending.",[123,1108,1109,1112,1113,1116],{},[71,1110,1111],{},"Your sign-in provider."," ",[76,1114,1115],{"href":385},"Section 9"," lists exactly what arrives from each.",[123,1118,1119,1122],{},[71,1120,1121],{},"Somebody else's finance department."," Your name, work email, billing address or purchase-order\nreference often comes from a colleague rather than from you.",[123,1124,1125,1128],{},[71,1126,1127],{},"Derived rather than collected."," The city and country against a sign-in come from IPGeolocation.io\nresolving the address the request arrived from, and the country on a contact-form enquiry from\nCloudflare doing the same at the edge",[67,1130,1131,1134],{},[71,1132,1133],{},"None of it comes from a data broker, a scraped list or an enrichment service."," We don't buy, rent or\nbuild lists. Ask and we'll tell you which applies to your record.",[229,1136,1138],{"id":1137},"_85-do-you-have-to-give-it-to-us","8.5 Do you have to give it to us?",[67,1140,1141,1144],{},[71,1142,1143],{},"On this website, nothing is asked of you."," Our contact form is the only thing that takes a name.",[67,1146,1147,1150],{},[71,1148,1149],{},"In Intracia, an email address and display name are a requirement of the contract."," We can't\ncreate an account without something to identify it by, or show your colleagues who changed a page\nwithout a name. If you decline, we can't give you an account.",[67,1152,1153,1156],{},[71,1154,1155],{},"Everything after that is optional",", and declining costs you only that feature. Connecting a Git\nprovider, bucket or deployment target is your choice. Analytics and recordings are off until you say\notherwise. An avatar and a GitHub handle are conveniences.",[67,1158,1159,1162],{},[71,1160,1161],{},"For consulting work, billing details are a legal requirement too."," We can't raise a compliant\ninvoice, or keep the records tax law demands, without them.",[115,1164,1166],{"id":1165},"_9-who-else-sees-it","9. Who else sees it",[67,1168,1169],{},"These providers process personal data on our instruction, each under a data processing agreement, each\ngetting only what its job needs.",[566,1171,1172,1187],{},[569,1173,1174],{},[572,1175,1176,1179,1182,1185],{},[575,1177,1178],{},"Provider",[575,1180,1181],{},"What it does",[575,1183,1184],{},"Data involved",[575,1186,580],{},[588,1188,1189,1209,1229,1254,1271,1291,1310,1329],{},[572,1190,1191,1200,1203,1206],{},[593,1192,1193],{},[76,1194,1197],{"href":1195,"rel":1196},"https:\u002F\u002Fwww.cloudflare.com\u002Fprivacypolicy\u002F",[80],[71,1198,1199],{},"Cloudflare",[593,1201,1202],{},"Hosting, caching, rate limiting, Turnstile, and the AI Gateway our model requests pass through",[593,1204,1205],{},"Requests and IP addresses at the edge, Turnstile's signals, cached lookups, and the model requests routed through the gateway",[593,1207,1208],{},"Global network",[572,1210,1211,1220,1223,1226],{},[593,1212,1213],{},[76,1214,1217],{"href":1215,"rel":1216},"https:\u002F\u002Fsupabase.com\u002Fprivacy",[80],[71,1218,1219],{},"Supabase",[593,1221,1222],{},"Authentication and the main database",[593,1224,1225],{},"Account, security and authoring data",[593,1227,1228],{},"United States — Ohio",[572,1230,1231,1238,1241,1251],{},[593,1232,1233],{},[76,1234,1236],{"href":208,"rel":1235},[80],[71,1237,210],{},[593,1239,1240],{},"Product analytics, error tracking and session replays in the CMS; visit counts and browser errors on this website. 2 separate projects",[593,1242,1243,1246,1247,1250],{},[71,1244,1245],{},"CMS:"," events tied to your user ID carrying your IP address, with your email on the profile; clicks, timings, heatmap coordinates; exception context; recordings you start, with that session's browser console log. ",[71,1248,1249],{},"Website:"," pages viewed, links and buttons clicked, heatmap coordinates, and errors that break a page, against a number hashed from your IP address, user agent and a daily secret — no profile, no account, nothing on your device",[593,1252,1253],{},"United States",[572,1255,1256,1263,1266,1269],{},[593,1257,1258],{},[76,1259,1261],{"href":465,"rel":1260},[80],[71,1262,296],{},[593,1264,1265],{},"Transactional email, and contact-form enquiries",[593,1267,1268],{},"Recipient address, inviter and site name; enquiry contents and reply-to address",[593,1270,1253],{},[572,1272,1273,1282,1285,1288],{},[593,1274,1275],{},[76,1276,1279],{"href":1277,"rel":1278},"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Ftrust-center\u002Fprivacy",[80],[71,1280,1281],{},"Microsoft",[593,1283,1284],{},"Microsoft 365 — mailboxes and working documents",[593,1286,1287],{},"Enquiries, support correspondence, replies; consulting proposals, contracts, client records",[593,1289,1290],{},"European Union",[572,1292,1293,1302,1305,1308],{},[593,1294,1295],{},[76,1296,1299],{"href":1297,"rel":1298},"https:\u002F\u002Fdocs.github.com\u002Fen\u002Fsite-policy\u002Fprivacy-policies\u002Fgithub-general-privacy-statement",[80],[71,1300,1301],{},"GitHub",[593,1303,1304],{},"Git integration — the GitHub App and webhooks",[593,1306,1307],{},"GitHub identity, repository and commit metadata",[593,1309,1253],{},[572,1311,1312,1321,1324,1327],{},[593,1313,1314],{},[76,1315,1318],{"href":1316,"rel":1317},"https:\u002F\u002Fipgeolocation.io\u002Fprivacy.html",[80],[71,1319,1320],{},"IPGeolocation.io",[593,1322,1323],{},"Approximate location for sign-in addresses",[593,1325,1326],{},"IP address",[593,1328,1253],{},[572,1330,1331,1339,1342,1345],{},[593,1332,1333,1338],{},[76,1334,1336],{"href":530,"rel":1335},[80],[71,1337,532],{},", via Cloudflare AI Gateway",[593,1340,1341],{},"Schema and template assistance, and alt-text suggestions",[593,1343,1344],{},"The schema or template, and what you type into the assistant; the address of an image you ask for alt text on, which it fetches to read",[593,1346,1253],{},[67,1348,1349,1352,1353,1356],{},[71,1350,1351],{},"That table, plus the sign-in providers below, is the list."," It isn't a summary of something fuller\nheld elsewhere, and you don't have to be a customer to see it. Our\n",[76,1354,109],{"href":1355},"\u002Fdpa#annex-3-approved-sub-processors"," points here rather than keeping a\nprivate copy that could drift.",[67,1358,1359,1360,1363],{},"Customers get ",[71,1361,1362],{},"at least 7 days' notice"," before we add a row, and can object under the DPA.",[67,1365,1366],{},"Microsoft's row covers Microsoft 365 only, which nothing in the product reads from or writes to.\nMicrosoft also appears below as a sign-in provider, and so does GitHub — different services, different\nreasons, no data passing between them.",[229,1368,1370],{"id":1369},"sign-in-providers","Sign-in providers",[67,1372,1373,1374,1377,1378,1381],{},"The table above is our ",[71,1375,1376],{},"sub-processors",". The sign-in providers aren't. When you choose “Sign in with\nGitHub”, GitHub runs its own authentication under its own terms as its ",[71,1379,1380],{},"own controller",", and hands us\nthe result. We send it nothing about you, and couldn't tell it what to keep. So for the part of the\nsign-in that's theirs, your rights are exercised against them.",[67,1383,1384,1385,1390,1391,1390,1397,1390,1404,1411,1412,110],{},"There are 5:\n",[76,1386,1388],{"href":1297,"rel":1387},[80],[71,1389,1301],{},",\n",[76,1392,1395],{"href":1393,"rel":1394},"https:\u002F\u002Fprivacy.microsoft.com\u002Fen-gb\u002Fprivacystatement",[80],[71,1396,1281],{},[76,1398,1401],{"href":1399,"rel":1400},"https:\u002F\u002Fwww.linkedin.com\u002Flegal\u002Fprivacy-policy",[80],[71,1402,1403],{},"LinkedIn",[76,1405,1408],{"href":1406,"rel":1407},"https:\u002F\u002Fwww.facebook.com\u002Fprivacy\u002Fpolicy\u002F",[80],[71,1409,1410],{},"Meta"," for Facebook sign-in, and\n",[76,1413,1416],{"href":1414,"rel":1415},"https:\u002F\u002Fpolicies.google.com\u002Fprivacy",[80],[71,1417,1418],{},"Google",[67,1420,1421],{},"We ask for a sign-in and nothing that reaches into the account — no contacts, connections,\nrepositories, calendar or posts, and nothing that lets us write anywhere. What comes back is more than\nthe email address we asked for:",[120,1423,1424,1430,1436,1442,1448,1454,1460],{},[123,1425,1426,1429],{},[71,1427,1428],{},"an identifier"," that provider uses for you, and which provider it is",[123,1431,1432,1435],{},[71,1433,1434],{},"your email address",", and whether they treat it as verified",[123,1437,1438,1441],{},[71,1439,1440],{},"your display name"," — from all except Microsoft, which sends none. LinkedIn sends first and last\nnames separately; Facebook adds a nickname",[123,1443,1444,1447],{},[71,1445,1446],{},"your profile picture's address"," — again from all except Microsoft",[123,1449,1450,1453],{},[71,1451,1452],{},"from GitHub, your handle."," From LinkedIn, your language and country preference",[123,1455,1456,1459],{},[71,1457,1458],{},"where the account belongs to an organisation, something identifying it"," — from Google the domain\nof its Workspace, from Microsoft its tenant identifier. Which is to say: where you work",[123,1461,1462,1465],{},[71,1463,1464],{},"a flag recording that no phone number is verified."," None is sent, and we hold none",[67,1467,1468,1471],{},[71,1469,1470],{},"Google is listed before the button exists."," It isn't switched on yet, and is named now because this\nsection undertakes to list a provider before it handles anything of yours.",[67,1473,1474],{},"Using one of these tells that provider you use Intracia, and we can't change that. You never have to:\nan email address and password work identically. You can revoke Intracia's access at any of them, which\nstops them confirming who you are but doesn't close your account here.",[229,1476,1478],{"id":1477},"when-the-law-compels-us","When the law compels us",[67,1480,1481,1482,1485],{},"A court order or other lawful demand can require us to hand something over. We comply with valid ones,\nand check they're valid. Where we're allowed to tell you, we will, ",[71,1483,1484],{},"before"," we disclose anything.\nSometimes we're legally forbidden from saying anything; then we say nothing, because the alternative is\na criminal offence. We won't volunteer your data to anyone who hasn't compelled it.",[229,1487,1489],{"id":1488},"if-the-company-changes-hands","If the company changes hands",[67,1491,1492],{},"If Intracia is bought or merges, the data described here moves with it. We'd tell you before it\nhappened, and whoever acquired it would be held to this policy until they published their own. Your\ncontent is in your own Git repository already.",[67,1494,1495,1498],{},[71,1496,1497],{},"We don't sell your personal data",", and don't share it for cross-context behavioural advertising, as\nCalifornia law defines those terms.",[115,1500,1502],{"id":1501},"_10-sending-information-abroad","10. Sending information abroad",[67,1504,1505,1506,1509,1510,1513],{},"We're established in ",[71,1507,1508],{},"Guernsey",", which the EU and UK both recognise as ",[71,1511,1512],{},"adequate"," — the highest\nstatus a country outside the EEA can hold, and the only one that removes the transfer restriction\nrather than papering over it. Transfers into Guernsey need no further safeguard.",[67,1515,1516,1517,1520,1521,1524,1525,1528,1529,1532],{},"Several providers in ",[76,1518,386],{"href":1519},"#9-who-else-sees-it"," are in the United States, including the database\nholding your account. For those we rely on the ",[71,1522,1523],{},"EU Standard Contractual Clauses"," and the ",[71,1526,1527],{},"UK\nInternational Data Transfer Addendum","; on the provider's ",[71,1530,1531],{},"Data Privacy Framework"," certification\nwhere it holds one; and on encryption in transit and at rest either way. Email us for the safeguards\ncovering a particular provider.",[67,1534,1535,1538],{},[71,1536,1537],{},"Our Microsoft 365 tenant is in the European Union."," We won't overstate that: Microsoft's terms\npermit limited access from outside the EU for support and security, covered by the Standard Contractual\nClauses in their data protection addendum. Storage in the EU isn't the same promise as no access from\nanywhere else.",[115,1540,1542],{"id":1541},"_11-how-long-we-keep-it","11. How long we keep it",[566,1544,1545,1554],{},[569,1546,1547],{},[572,1548,1549,1551],{},[575,1550,830],{},[575,1552,1553],{},"Retention",[588,1555,1556,1567,1578,1593,1602,1614,1622,1633,1643,1651,1661,1674,1685,1697,1708,1718,1729,1739],{},[572,1557,1558,1561],{},[593,1559,1560],{},"Requests to this website at Cloudflare's edge",[593,1562,1563,1564,1566],{},"Up to ",[71,1565,199],{},", then deleted by Cloudflare",[572,1568,1569,1572],{},[593,1570,1571],{},"Account and profile data",[593,1573,1574,1575,1577],{},"Life of the account, then deleted within ",[71,1576,783],{}," of closure",[572,1579,1580,1583],{},[593,1581,1582],{},"Sign-in and security records",[593,1584,1585,1586,1588,1589,1592],{},"IP address and browser up to ",[71,1587,451],{}," then stripped; the rest up to ",[71,1590,1591],{},"12 months"," then deleted",[572,1594,1595,1598],{},[593,1596,1597],{},"Cached IP geolocation",[593,1599,1563,1600],{},[71,1601,199],{},[572,1603,1604,1607],{},[593,1605,1606],{},"Product analytics events",[593,1608,1609,1610,1613],{},"PostHog's retention for our project is ",[71,1611,1612],{},"7 years"," — see below. It isn't what decides how long yours are kept: they're attached to your user ID, so they go in full when you close your account or ask",[572,1615,1616,1619],{},[593,1617,1618],{},"The daily secret a website visit is counted against",[593,1620,1621],{},"Deleted at the end of that day, by PostHog",[572,1623,1624,1627],{},[593,1625,1626],{},"Website visit counts",[593,1628,1629,1630,1632],{},"The same ",[71,1631,1612],{},", equally PostHog's figure. Once the secret is deleted nothing left connects to you, and there's no person record to delete because none was created",[572,1634,1635,1638],{},[593,1636,1637],{},"Diagnostic logs",[593,1639,1563,1640,1642],{},[71,1641,783],{},", a period we set and PostHog enforces",[572,1644,1645,1648],{},[593,1646,1647],{},"Error reports",[593,1649,1650],{},"These reach PostHog as events, so the 7 years above covers them",[572,1652,1653,1656],{},[593,1654,1655],{},"Session replays",[593,1657,1563,1658,1660],{},[71,1659,783],{}," — the shortest period PostHog offers",[572,1662,1663,1666],{},[593,1664,1665],{},"Webhook delivery logs",[593,1667,1668,1669,1671,1672],{},"Payload and headers up to ",[71,1670,783],{}," then stripped; the delivery record up to ",[71,1673,451],{},[572,1675,1676,1679],{},[593,1677,1678],{},"Content and media you author",[593,1680,1681,1682,1684],{},"As long as your site holds it — deleted on your instruction, or at contract end as the ",[76,1683,353],{"href":352}," provides",[572,1686,1687,1690],{},[593,1688,1689],{},"Database backups",[593,1691,1692,1693,1696],{},"Daily, kept up to ",[71,1694,1695],{},"7 days"," rolling, then overwritten",[572,1698,1699,1702],{},[593,1700,1701],{},"Enquiries and support correspondence",[593,1703,1563,1704,1707],{},[71,1705,1706],{},"24 months"," after the matter closes",[572,1709,1710,1713],{},[593,1711,1712],{},"An enquiry in Resend's sending log",[593,1714,1563,1715,1717],{},[71,1716,783],{},", then deleted by Resend",[572,1719,1720,1723],{},[593,1721,1722],{},"Consulting proposals and contracts",[593,1724,1725,1726],{},"The engagement, then ",[71,1727,1728],{},"6 years",[572,1730,1731,1734],{},[593,1732,1733],{},"Invoices and accounting records",[593,1735,1736,1738],{},[71,1737,1612],{}," — required by law, and not something we can shorten",[572,1740,1741,1744],{},[593,1742,1743],{},"Record of what you agreed to, and when",[593,1745,1746,1747,1749],{},"As long as we rely on it, then ",[71,1748,1728],{}," — see below",[67,1751,1752,1753,1756],{},"These are ",[71,1754,1755],{},"maximums, not minimums",". Where something can go sooner it does. The rows running the other\nway are the ones the law fixes from below.",[67,1758,1759,1762],{},[71,1760,1761],{},"The record of your choices"," notes what you were asked, which version you saw, what you decided and\nwhen. It has to outlive the decision it describes, because it's the only thing that could show we\ndidn't switch analytics on without asking — and equally what you'd rely on if you thought we had. So it\nsurvives account closure, and an erasure request won't normally reach it. You also have a right to\nobject, so if you ask, we'll weigh your reasons against ours and tell you what we're keeping and why.\nIt holds an identifier, a decision, a document version, a timestamp and roughly which country you were\nin.",[67,1764,1765,1768],{},[71,1766,1767],{},"7 years is PostHog's figure rather than one we chose",", and we can't change it — their retention\nsettings cover recordings and logs, not events. What we control is deletion, and that's what decides\nhow long your data lasts.",[115,1770,1772],{"id":1771},"_12-keeping-it-safe","12. Keeping it safe",[67,1774,1775],{},"Every tenant table enforces row-level security, so one customer's rows are unreachable from another's\nsession. Every API route authenticates the caller and checks their role. The elevated database\ncredential is server-only and never reaches a browser. Credentials you give us are encrypted at rest.\nTraffic is encrypted in transit. We keep secrets, tokens and request bodies out of logs and analytics.",[67,1777,1778,1781],{},[71,1779,1780],{},"One deliberate exception."," The webhook delivery log holds the body of the webhook your Git provider\nsends, because a failed delivery can't be diagnosed from the fact that it failed. It's the only request\nbody we keep. The headers beside it exclude the signature and anything credential-shaped, and the body\nis stripped on the schedule above.",[67,1783,1784,1787,1788,1791],{},[71,1785,1786],{},"If something goes wrong",", we'll notify the relevant supervisory authority ",[71,1789,1790],{},"within 72 hours"," of\nbecoming aware, where the law requires it, and tell affected people directly without undue delay where\nthe breach is likely to put them at high risk. Where it concerns content we hold as processor, we\nnotify the customer who controls it. We keep a record of every breach, notifiable or not.",[115,1793,1795],{"id":1794},"_13-your-rights","13. Your rights",[67,1797,1798],{},"Subject to the conditions in the law that applies to you, you can ask us to:",[120,1800,1801,1807,1813,1819,1829,1835,1841],{},[123,1802,1803,1806],{},[71,1804,1805],{},"give you a copy"," of what we hold about you",[123,1808,1809,1812],{},[71,1810,1811],{},"correct"," anything inaccurate",[123,1814,1815,1818],{},[71,1816,1817],{},"delete"," it",[123,1820,1821,1824,1825,1828],{},[71,1822,1823],{},"restrict"," what we do with it, or ",[71,1826,1827],{},"object"," to processing based on legitimate interests",[123,1830,1831,1834],{},[71,1832,1833],{},"port"," it, in a structured machine-readable format",[123,1836,1837,1840],{},[71,1838,1839],{},"withdraw consent"," at any time, which doesn't affect what was done before",[123,1842,1843,1846,1847],{},[71,1844,1845],{},"complain"," to a supervisory authority — ",[76,1848,1850],{"href":1849},"#15-contact-us","section 15",[67,1852,1853],{},"We don't make solely automated decisions with legal or similar effects.",[67,1855,1856,1857,1859,1860,1863,1864,1867],{},"Email ",[76,1858,159],{"href":158},". We'll verify who you are proportionately,\nwithout demanding documents we don't need, and respond within ",[71,1861,1862],{},"one month",". Complex requests can\nextend that by up to ",[71,1865,1866],{},"2 further months"," if we tell you why.",[67,1869,1870,1873,1874,1877],{},[71,1871,1872],{},"Deletion reaches the copies outside our database."," Your PostHog profile goes in full — person\nrecord, events and any recordings — along with your delivery records at our email provider. ",[71,1875,1876],{},"It\nreaches our mailbox too",": correspondence in Exchange Online and documents in OneDrive and SharePoint\nare searched and removed on the same request. Deleted mail sits briefly in Microsoft's\nrecoverable-items store before purging, and a message you sent us is also in your own sent items, which\nwe can't reach.",[67,1879,1880,1883],{},[71,1881,1882],{},"A copy of your data never includes credentials."," API keys, tokens and provider secrets open systems\nthat aren't ours, and usually belong to an organisation rather than one person. They're stored\nencrypted and never sent to a browser, so not even you can read one back. Replace or revoke them\nyourself in the product.",[67,1885,1886,1889],{},[71,1887,1888],{},"One limit we can't engineer around."," Git records an author's name and email inside every commit, and\na commit's identifier is a hash over that plus the commit before it. The repository is your\norganisation's, held with your own provider, so rewriting its history isn't our decision — and copies\nothers have cloned are beyond anyone's reach. Erasure removes you from our systems, not from commits\nyou authored.",[67,1891,1892],{},"If your request concerns content on a customer's site, we'll forward it to that customer and help them\nanswer.",[115,1894,1896],{"id":1895},"_14-where-you-live","14. Where you live",[67,1898,1899,1900,1902],{},"The rights in ",[76,1901,814],{"href":813}," are what we offer everyone. Some places add to them.",[67,1904,1905,1908],{},[71,1906,1907],{},"California and other US states."," In the last 12 months we've collected the categories in\nsections 3 to 7 — identifiers, internet and network activity, commercial and professional information —\nfor the purposes in section 8, disclosed only to the providers in section 9. We don't sell your\npersonal information or share it for cross-context behavioural advertising, so there's no “Do Not Sell\nor Share” action to take. You have the right to know, access, delete and correct, and to limit the use\nof sensitive personal information, which we don't collect. You won't be treated differently for\nexercising these rights, and you may use an authorised agent whose authority we'll verify.",[67,1910,1911],{},"Virginia, Colorado, Connecticut, Texas, Oregon, Montana and others give materially the same rights,\nplus opt-outs of sale, targeted advertising and significant automated decisions — none of which we do.",[67,1913,1914,1917,1918,1921],{},[71,1915,1916],{},"If we turn a request down, you can appeal."," Reply to our refusal, or write to us with “appeal” in\nthe subject line. There's no form and you don't need a lawyer. Damien Guard looks at it again and\nyou'll have a written answer ",[71,1919,1920],{},"within 45 days",", the shortest deadline any of those states sets. If we\nstill decline, the answer says why and tells you, with a link, that you can complain to your state\nAttorney General.",[67,1923,1924,1927],{},[71,1925,1926],{},"Global Privacy Control."," Several states treat a GPC signal as an opt-out of sale, sharing and\ntargeted advertising, none of which we do — so there's nothing for it to switch off, and we honour it\nanyway.",[67,1929,1930,1933,1934,1937],{},[71,1931,1932],{},"The EU, EEA and UK."," The rights in section 13 come from the EU and UK GDPR and apply in full. ",[71,1935,1936],{},"Your\ndata leaves the EEA and UK"," — not “may”, it does. The database holding your account runs in the\neastern United States and most providers in section 9 are US companies. There's no EEA-hosted option to\nchoose. You can complain to your own national authority, or the ICO, without coming to us first.",[67,1939,1940,1943],{},[71,1941,1942],{},"Guernsey."," The Data Protection (Bailiwick of Guernsey) Law 2017 gives you equivalent rights, and the\nODPA is both our home authority and your route to complain about us.",[67,1945,1946,1949],{},[71,1947,1948],{},"Anywhere else."," Write to us anyway. We'll handle your request as though the EU and UK GDPR applied:\naccess, correction, deletion, a portable copy, the right to object, and an answer within a month. You\nwon't be asked to prove where you live.",[115,1951,1953],{"id":1952},"_15-contact-us","15. Contact us",[67,1955,1956,1957,1959,1960,1962],{},"We're always glad to hear from you. Come to us first if you can —\n",[76,1958,159],{"href":158}," — and we'll try to put it right. ",[71,1961,48],{},"\nreads that address and answers it himself. There's no queue.",[67,1964,1965,1966,1971,1972,1977,1978,1983,1984,1989,1990,110],{},"You can also complain to a supervisory authority: the\n",[76,1967,1970],{"href":1968,"rel":1969},"https:\u002F\u002Fodpa.gg",[80],"Office of the Data Protection Authority"," in Guernsey, the\n",[76,1973,1976],{"href":1974,"rel":1975},"https:\u002F\u002Fico.org.uk",[80],"Information Commissioner's Office"," in the UK,\n",[76,1979,1982],{"href":1980,"rel":1981},"https:\u002F\u002Fwww.edpb.europa.eu\u002Fabout-edpb\u002Fabout-edpb\u002Fmembers_en",[80],"your local authority"," in the EEA, or in\nCalifornia the ",[76,1985,1988],{"href":1986,"rel":1987},"https:\u002F\u002Fcppa.ca.gov",[80],"Privacy Protection Agency"," or\n",[76,1991,1994],{"href":1992,"rel":1993},"https:\u002F\u002Foag.ca.gov\u002Fprivacy",[80],"Attorney General",[67,1996,1997],{},"We're established in Guernsey, which is neither in the UK nor the EEA. If you're in either, that email\naddress reaches the person who decides, and those authorities are open to you without coming to us\nfirst.",[67,1999,2000,2002,2003,110],{},[71,2001,73],{},", Ohana, La Route du Coutanchez, St Peter Port, GY1 2TX, Guernsey. Company number\n",[76,2004,2006],{"href":78,"rel":2005},[80],"124060",[115,2008,2010],{"id":2009},"_16-changes","16. Changes",[67,2012,2013],{},"This page carries the date it was last revised, at the top. If it hasn't moved, nothing has changed.",[67,2015,2016,2019],{},[71,2017,2018],{},"If we hold an email address for you",", we'll write to you about anything material — a new\nsub-processor, a new category of data, a change in what we do with what we already have. If we don't,\nwe can't: there's no cookie, no profile and no mailing list that would let us reach you. That's the\ntrade, and the date at the top is how you check.",{"title":2021,"searchDepth":2022,"depth":2022,"links":2023},"",2,[2024,2025,2026,2030,2031,2041,2042,2046,2053,2058,2059,2060,2061,2062,2063,2064],{"id":117,"depth":2022,"text":118},{"id":163,"depth":2022,"text":164},{"id":186,"depth":2022,"text":187,"children":2027},[2028],{"id":231,"depth":2029,"text":232},3,{"id":314,"depth":2022,"text":315},{"id":336,"depth":2022,"text":337,"children":2032},[2033,2034,2035,2036,2037,2038,2039,2040],{"id":367,"depth":2029,"text":368},{"id":398,"depth":2029,"text":399},{"id":424,"depth":2029,"text":425},{"id":431,"depth":2029,"text":432},{"id":454,"depth":2029,"text":455},{"id":473,"depth":2029,"text":474},{"id":483,"depth":2029,"text":484},{"id":490,"depth":2029,"text":491},{"id":523,"depth":2022,"text":524},{"id":553,"depth":2022,"text":554,"children":2043},[2044,2045],{"id":557,"depth":2029,"text":558},{"id":651,"depth":2029,"text":652},{"id":786,"depth":2022,"text":787,"children":2047},[2048,2049,2050,2051,2052],{"id":817,"depth":2029,"text":818},{"id":905,"depth":2029,"text":906},{"id":949,"depth":2029,"text":950},{"id":1097,"depth":2029,"text":1098},{"id":1137,"depth":2029,"text":1138},{"id":1165,"depth":2022,"text":1166,"children":2054},[2055,2056,2057],{"id":1369,"depth":2029,"text":1370},{"id":1477,"depth":2029,"text":1478},{"id":1488,"depth":2029,"text":1489},{"id":1501,"depth":2022,"text":1502},{"id":1541,"depth":2022,"text":1542},{"id":1771,"depth":2022,"text":1772},{"id":1794,"depth":2022,"text":1795},{"id":1895,"depth":2022,"text":1896},{"id":1952,"depth":2022,"text":1953},{"id":2009,"depth":2022,"text":2010},null,"What Intracia Ltd collects, why, who else sees it, and what you can ask us to do about it.","md","What Intracia Ltd does with your personal data — on this website, in our Intracia product, and in our consulting work.",{},true,"\u002Flegal\u002Fprivacy",{"title":62,"description":2066},"published","legal\u002Fprivacy","24 August 2026","NDrKFE7u6cSkj7di5eC-kpC7p988tG5pHS3DTZfnKmI",1788372938844]