Privacy Policy

This Privacy Policy describes how IntegrationGuard, Inc. ("IntegrationGuard," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our website at https://www.integrationguard.com (the "Site") and our business-to-business software-as-a-service platform and related services, including our web dashboard, APIs, and command-line interfaces (collectively, the "Service").

This policy is designed to be read together with our Terms of Service. By using the Site or Service, you agree to this Privacy Policy.

Controller / business contact: IntegrationGuard, Inc., [REGISTERED_AGENT_OR_PRINCIPAL_BUSINESS_ADDRESS].

Privacy inquiries: privacy@integrationguard.com.

If you are in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you may also contact [EU_UK_REPRESENTATIVE] (if appointed) regarding GDPR/UK GDPR-related questions.

The Service is intended for business use by companies and their personnel (for example, engineering, DevOps, and IT teams). The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Depending on where you live, you may have additional privacy rights described below.

We collect personal information that falls into the categories below. The specific data elements depend on how you use the Service.

• Account and identity information: name, work email address, company name, job title or role (if provided), and similar business contact details you provide when you register, invite users, or communicate with us.
• Authentication and security information: account credentials, security tokens, session identifiers, multi-factor authentication details, and related security logs needed to operate sign-in and protect accounts.
• Billing and payment information: if you purchase paid offerings, payment processing is handled by our payment processor (for example, Stripe). We may receive limited billing-related information (such as subscription status, billing address, and transaction references) but we generally do not receive your full payment card number.
• Service usage, technical, and operational metadata: IP address, device/browser type, approximate location derived from IP, timestamps, diagnostic logs, error messages, performance metrics, and product analytics events.
• Integration monitoring metadata: to provide monitoring and reliability features, the Service may process limited metadata related to integrations you configure, which may include API endpoints, logs, error messages, and usage metrics. We do not intend to collect sensitive categories of personal information through customer integrations; customers are responsible for configuring integrations appropriately and for any personal information their systems may incidentally include in logs or metadata.
• Communications: if you contact us (for example, support requests), we collect the information you provide (such as message content and contact details).
• Marketing preferences: if you sign up for marketing emails, we collect your preferences and related information needed to send and measure those communications.

• Directly from you (for example, account registration, profile fields, communications).
• Automatically when you use the Site or Service (for example, cookies, logs, analytics).
• From your organization (for example, an administrator inviting you to an account).
• From service providers that help us operate the Service (for example, authentication, hosting, analytics, payment processing), where permitted by law.

• Provide, operate, maintain, secure, and improve the Site and Service.
• Create and manage accounts; authenticate users.
• Process transactions and communicate about billing, renewals, and service notices.
• Provide customer support and respond to inquiries.
• Send transactional/service-related messages (for example, security alerts and account notices).
• Send marketing emails where permitted (for example, if you opt in or as allowed by law), including newsletters and promotional messages about our products.
• Monitor usage, troubleshoot issues, detect and prevent fraud, abuse, and security incidents.
• Comply with law, enforce our terms, and protect rights, privacy, safety, and property.
• Conduct internal analytics and product improvement.

Where GDPR/UK GDPR/Swiss law applies, we rely on one or more of the following legal bases:

• Contract — processing necessary to perform our contract with you (or take steps at your request before contracting), such as providing the Service and managing your account.
• Legitimate interests — processing necessary for our legitimate interests that are not overridden by your rights, such as securing the Service, improving features, fraud prevention, and internal analytics (where consistent with law).
• Consent — where required (for example, certain cookies/analytics or marketing communications, depending on your region and our practices). You may withdraw consent at any time where processing is based on consent.
• Legal obligations — processing necessary to comply with applicable law.

We use cookies and similar technologies for essential operation (authentication, session management, security), analytics to understand product usage and improve performance, and security (for example, detecting malicious activity).

Depending on your region and our implementation, non-essential cookies/analytics may require consent. You can control cookies through browser settings and [DESCRIBE_COOKIE_CONTROLS].

We may use analytics providers such as [ANALYTICS_PROVIDERS]. Their use of information may be governed by their policies.

• Service providers / subprocessors who process information on our behalf under contractual obligations, such as hosting/infrastructure ([HOSTING_OR_INFRA_PROVIDERS]), authentication providers, analytics providers, email delivery, customer support tools, and payment processors (for example, Stripe).
• Professional advisers (lawyers, accountants) where needed.
• Authorities when required by law, legal process, or to protect rights, safety, and security.
• Corporate transactions such as a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

We are headquartered in the United States. If you access the Service from outside the United States, your information may be processed in the United States and other countries where we or our service providers operate.

Where required, we implement appropriate safeguards for international transfers, such as [STANDARD_CONTRACTUAL_CLAUSES_OR_EQUIVALENT] and supplementary measures as appropriate.

We retain personal information for as long as necessary to provide the Service and for the purposes described in this policy, including account data for the life of the account and a reasonable period thereafter for backups, legal compliance, and dispute resolution; security logs for a period needed for security monitoring and investigations; billing records as required for accounting, tax, and contractual purposes; and other categories as described in [DATA_RETENTION_PERIODS].

Retention periods may vary based on the nature of the data, legal obligations, and business needs.

We implement reasonable technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights regarding your personal information. Subject to exceptions and verification requirements, these may include access, correction, deletion, portability, objection/restriction, withdrawal of consent where processing is based on consent, and lodging a complaint with a supervisory authority (EEA/UK).

You may opt out of marketing emails using the unsubscribe link in marketing emails or by contacting us.

To exercise rights, contact privacy@integrationguard.com. We may need to verify your identity before fulfilling requests [VERIFY_IDENTITY_PROCESS].

If you are a resident of certain U.S. states with comprehensive privacy laws, you may have additional rights regarding personal information, which can include access, deletion, correction, and opt-out rights depending on the law and whether exceptions apply (including business-to-business and employment-related carve-outs that may limit certain requests).

California residents (CCPA/CPRA): we provide this notice for transparency. Depending on our practices and applicability thresholds, California residents may have rights to know, delete, correct, and opt out of certain processing. We do not sell personal information as currently defined in the CPRA, and we do not share personal information for cross-context behavioral advertising unless our practices change. If you are a California resident and wish to submit a request, contact privacy@integrationguard.com.

We do not use personal information for solely automated decision-making that produces legal or similarly significant effects about you unless our practices change (update this section if that changes).

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us and we will take appropriate steps.

The Site or Service may contain links to third-party websites or services. Their privacy practices are governed by their own policies.

We may update this Privacy Policy from time to time. We will post the updated policy on the Site and update the effective date. If changes are material, we will provide additional notice as required by law.

IntegrationGuard, Inc. Email: privacy@integrationguard.com. Address: [REGISTERED_AGENT_OR_PRINCIPAL_BUSINESS_ADDRESS].