IDYL

1. About this policy

Idyl Labs, Inc. is responsible for the personal information described in this policy. It applies to IDYL Computer and its related websites, console, APIs, command-line tools, and SDKs (the Service), and to communications you send us.

2. When you visit the site or use the console

Where Cloudflare Web Analytics is enabled, it measures visits and performance using information such as the page visited, referrer, page timing, browser, operating system, device type, and country. It measures these visits without using cookies or local storage for analytics. We use this information to understand how the website performs.

Sign-in uses a session cookie that lasts up to 30 days. The console stores session information for the life of the tab and can save layout preferences in your browser. An appearance preference cookie can last up to a year. You can clear or block browser storage through your browser settings. This can affect sign-in and saved preferences.

Our Service does not respond to Do Not Track signals. Where applicable law requires us to recognize an opt-out preference signal such as Global Privacy Control, we honor it for the processing it covers.

3. Signing in, managing an Account, and contacting us

We receive your email address, Account details such as your display name, the email addresses you invite, and the public portion of access keys you register. We keep records of your Account, Namespaces, and permissions. We may also receive language and time zone settings when you sign in.

When you contact us, we receive the information you send, including your contact details and the contents of your request.

4. Files, code, and work on your Computers

We process the files, code, settings, saved versions, and other data you put on Computers or create through them. Saved notebook history can include commands and their output.

When you use IDYL through an organization. IDYL decides how to use personal information for account administration, billing, support, security, and website analytics. When we process personal information within Customer Content on behalf of an organization, that organization decides what to put in the Service and why. We handle that information to provide and protect the Service, subject to the organization's instructions and any applicable agreement. Direct requests about that information to the organization.

The services and integrations you choose to connect to a Computer have their own privacy policies. The Terms of Service describe your rights in Customer Content and the permissions you give IDYL to process it.

5. Usage records, payments, and trial eligibility

  • Service activity. We collect usage records such as Computer size, awake time, storage and download quantities, and where a Computer ran. Operational and security records may contain Account identifiers, Computer names, request details, and IP addresses.
  • Billing. We keep your plan, usage, balances, purchase amounts, payment status, refill settings, and Stripe identifiers. Stripe receives card details, billing contact information, address, and tax information you provide at checkout. Stripe handles your card details directly.
  • Trial eligibility. We create a keyed hash from your verified email address and use it to check whether a trial has already been claimed. It is a separate record from the email address on your Account.

6. Purposes and legal bases for processing

We use this information to verify sign-in, run Accounts and Computers, meter usage, process payments, respond to support requests, and send service messages such as usage, renewal, and file notices. We also use it to diagnose problems, understand website performance, protect the Service, prevent fraud and trial abuse, enforce our Terms, and meet legal obligations.

Where EEA or UK data protection law applies, we rely on contract to provide the Service to you and take steps you request before entering the contract. Our legitimate interests include operating and securing the Service, supporting business customers, preventing fraud and abuse, and measuring website performance. We rely on legal obligations for activities such as tax and accounting, and on consent where required. An email address is required to create an Account. A payment method is required for paid purchases.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use Customer Content for advertising.

7. How we protect information and control access

We encrypt saved Computer files at rest and use encrypted connections to IDYL service endpoints. We use access controls to protect Account, usage, and service records.

The machine running your Computer processes its files and may cache copies for subsequent use. Authorized IDYL personnel and infrastructure providers can access information as needed to operate the Service, respond to support or security issues, and comply with law. People you authorize can access Account resources according to the permissions you give them.

8. Service providers and other recipients

We use providers to deliver the Service. The information they receive depends on their role.

  • Amazon Web Services provides infrastructure for services, databases, saved files, and service email.
  • Cloudflare provides website delivery, network security, and website analytics.
  • Stripe processes payments, subscriptions, and tax. Stripe handles the billing details it collects under its own privacy policy.
  • Hetzner provides infrastructure in Finland that runs Computers and can hold files used by those Computers.
  • Google serves fonts on some sign-in and console pages. It receives information such as your IP address when your browser requests those fonts.

We may also disclose information at your direction, to people you authorize, in response to valid legal process, to protect the rights or safety of IDYL or others, or as part of a financing, merger, acquisition, or asset sale.

9. Where information is processed

IDYL is based in the United States. Account information and saved files can be processed in the United States. Computers can run in Finland, and information may also be processed in other countries where our providers operate. Where transfer safeguards are required, we use an applicable legal mechanism, such as standard contractual clauses. Contact us to ask which safeguards apply to a transfer and to request a copy.

10. What we keep and how to request deletion

We retain Account information and saved files to provide the Service. You can download saved files and delete a Computer in the console. Deleting a Computer removes access to it and starts removal of its stored files. Copies still referenced by another saved resource remain available to that resource.

Closing your Account and erasing data are separate actions. Saved files and Account records may remain after closure. Download the files you want to keep before closing. To request erasure of personal information or removal of remaining files, email support@idyl.dev. Our Terms of Service describe advance notice before we remove saved files for lack of a plan and credit.

We keep billing and transaction records for accounting, tax, and legal obligations. We retain support and operational records as needed for security, service operation, and resolving disputes. Backups and caches can hold copies until they are cleared or expire. We keep the trial eligibility hash after Account closure to prevent repeat claims. Stripe retains its records under its own policy.

11. Exercising your privacy rights

Depending on where you live, you may have rights to know how we handle your personal information, access or receive a copy of it, correct it, delete it, restrict its use, object to processing, or receive it in a portable format. You may withdraw consent for processing that relies on it. You can also complain to your local data protection authority where applicable.

To make a request, email support@idyl.dev. We may verify your identity. Where permitted, an authorized agent may act on your behalf. We do not discriminate against you for exercising privacy rights. If we decline a request and you have a right to appeal, reply to our decision to appeal. You may also contact the relevant regulator, including your state attorney general where applicable.

12. California privacy disclosures

For California residents, the categories of personal information we collected and disclosed for business purposes over the past 12 months include identifiers, commercial and transaction information, internet activity, approximate location, and personal information in Customer Content or communications. See Sections 2–5 for sources, Section 6 for purposes, and Section 8 for recipients. We do not use sensitive personal information to infer characteristics about you or disclose personal information to third parties for their own direct marketing.

13. Children’s privacy

Accounts are for adults. We do not knowingly collect personal information directly from children. Contact us if you believe a child has provided it to us.

14. Updates to this policy

We will post changes to this policy here and update the date above. For a material change, we will give at least 30 days' notice by email or on our website.

15. Contact IDYL about privacy

For privacy questions and requests, email support@idyl.dev or write to Idyl Labs, Inc., 2261 Market Street STE 62780, San Francisco, CA 94114, United States.