Privacy Policy

1. Our Core Commitments

We built Patchnet around a simple idea: your data belongs to you. Specifically:

• Your data is yours. You retain all rights, title, and interest in the content, files, projects, prompts, and outputs you create, upload, or generate through the Service (“Customer Data”).
• We do not sell or monetize your data. We will never sell, rent, or license Customer Data to advertisers, data brokers, or any third party for their own commercial use.
• We do not train AI models on your data. We do not use Customer Data to train, fine-tune, or improve any general-purpose machine learning models, whether ours or a third party’s.
• We do not share your data, except in the narrow circumstances described in Section 5 (operating the Service, your explicit instructions, or a valid legal demand we cannot lawfully refuse).

These commitments are contractual. If we ever change them, we will notify account holders before the change takes effect and give you a meaningful opportunity to export your data and close your account.

2. Information We Collect

• Account information. When you sign up, we collect your name, email address, organization, and authentication identifiers (for example, Microsoft Entra ID or Google OAuth tokens).
• Customer Data. Content you and your agents create, upload, or store in the Service, including markdown files, project metadata, documents, prompts, and agent outputs.
• Usage and device information. Log data, IP address, browser type, device identifiers, pages visited, features used, timestamps, and similar telemetry necessary to operate, secure, and improve the Service.
• Billing information. If you purchase a paid plan, our payment processor collects payment card or ACH information. We do not store full payment card numbers on our servers.
• Communications. Messages you send to us through support, sales, or contact forms.

We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate users and protect accounts.
• Process transactions and send related communications (receipts, renewal notices).
• Detect, investigate, and prevent abuse, fraud, and security incidents.
• Provide customer support and respond to your requests.
• Improve the Service, including diagnosing bugs and analyzing aggregated, de-identified usage patterns. We do not use Customer Data content for this purpose.
• Comply with legal obligations.

4. AI Models and Internal AI Tools

Patchnet does not currently offer or provide AI models as part of the Service. Any Customer Data sent to an AI model is sent because you chose to connect and use that model provider through your own credentials. Your relationship with the model provider is governed by their terms, not ours.

Patchnet does use AI-assisted tools internally to operate, support, and maintain the Service (for example, development, debugging, log analysis, and responding to support requests). In the course of that work, those tools may access some parts of Customer Data. We select vendors whose terms prohibit using Customer Data to train their models, consistent with the commitments in Section 1.

5. When We Share Information

We share information only in the following limited cases:

• Service providers (subprocessors). We use vetted vendors to host infrastructure, process payments, send transactional email, and provide analytics on aggregated usage. They are bound by contract to handle data only as needed to provide their service to us. A current list is available on request.
• At your direction. If you connect a third-party tool (for example, Microsoft 365, GitHub, Google Workspace), we share data with that tool as needed to perform the integration you set up.
• Within your organization. Members of your organization or project may see Customer Data based on the access controls you configure.
• Legal demands. We may disclose information in response to a subpoena, court order, search warrant, or other valid legal process where we are legally compelled to do so. Where lawfully permitted, we will:
  • Notify the affected account holder before disclosure so they may seek a protective order or otherwise contest the demand.
  • Narrow the disclosure to what is legally required.
  • Push back on overbroad or facially invalid requests.
• Safety and security. To investigate, prevent, or respond to suspected fraud, abuse, security incidents, or activity that threatens the rights, property, or safety of Patchnet, our users, or the public.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may transfer to the successor entity, subject to the terms of this Policy. We will notify you of any change in ownership or control of your data.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

6. Security

We use industry-standard administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS 1.2+), encryption at rest, role-based access controls, audit logging, and least-privilege access for employees. No system is perfectly secure. If we discover a breach affecting your data, we will notify you without undue delay.

7. Data Retention

We retain Customer Data for as long as your account is active. After termination, we will delete or return Customer Data within 30 days unless we are legally required to retain it longer or you have requested an export window. Backups containing residual data may persist for up to 90 days before they are overwritten in the normal course of operations.

You can delete projects, documents, and your account at any time through the Service.

8. Your Choices

You can:

• Access, update, or delete your account information from your account settings.
• Export your Customer Data at any time. Markdown content remains in formats you can read and use without us.
• Close your account, which terminates further processing.
• Opt out of non-transactional emails through the unsubscribe link in those messages.

If you are a resident of a state that grants additional privacy rights (for example, the right to know, delete, correct, or limit use of personal information), we honor those rights regardless of where you live. To exercise them, email [email protected].

9. International Users

The Service is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. We will treat data we receive consistently with this Policy regardless of where it originated.

10. Cookies and Similar Technologies

We use cookies and similar technologies to keep you logged in, remember preferences, and measure aggregated usage. You can control cookies through your browser settings. We do not use cookies to build cross-site advertising profiles.

11. Changes to This Policy

We may update this Policy from time to time. If we make a material change, we will notify account holders by email or in-product notice at least 30 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.