Privacy & Policy

last updated on March 07, 2025

1. Introduction Product Env ("we," "our," or "us"); values your privacy and is committed to protecting your personal information. This Privacy Policy outlines how we collect, use, process, store, and protect your data when you use our website and services. By using ProductEnv, you agree to the practices described in this Privacy Policy.
2. Information We Collect We collect different types of information from users depending on their method of registration and interaction with our platform. The types of personal information we collect include:
   • Regular Registration: When users create an account through our standard registration process, we collect their first name, last name, email address, password, and organization name.
   • Sign-up via Google or GitHub: Users who register using Google or GitHub authentication provide their first name, last name, profile image, an ID (sub), email address, and organization name. Since these authentication methods use third-party providers, we do not collect or store passwords for these accounts.
   Additionally, we may collect non-personal information such as device type, browser type, and general usage data to improve the user experience and enhance platform security.
3. How We Use Your Information We use the personal information collected from users to provide and improve our services. The primary purposes for which we use your information include:
   • User Management: We utilize your data to create and manage user accounts, ensuring a seamless experience across the platform.
   • Organization and Collaboration Features: Users can invite team members to their organizations. We use collected data to facilitate this process and maintain access controls.
   • Search Functionality: We allow users to search for team members or other relevant users within the platform using their email addresses.
   • Platform Security and Fraud Prevention: Your information helps us monitor, detect, and prevent fraudulent activities, unauthorized access, or other security threats.
   • Communication and Customer Support: We may use your contact information to send important notifications, respond to inquiries, and provide technical support.
   • Legal Compliance: We may process your personal data to comply with legal and regulatory requirements.
4. Data Security We understand the importance of protecting user data and take appropriate security measures to prevent unauthorized access, disclosure, or misuse of information. All personal data is securely stored in a PostgreSQL database hosted on AWS. AWS provides robust security features, including encryption, access controls, and continuous monitoring to ensure the highest level of data protection. We also implement industry-standard security practices such as:
   • Encryption: We use encryption technologies to protect data at rest and in transit.
   • Access Controls: Restricted access to sensitive data is enforced to authorized personnel only.
   • Regular Security Audits: We perform routine security checks and updates to mitigate risks.
   Despite our best efforts, no system can be 100% secure. Users are encouraged to practice good security hygiene, such as using strong passwords and enabling multi-factor authentication when available.
5. Sharing of Information We respect your privacy and do not sell, rent, or trade your personal information to third parties. However, we may share data in the following situations:
   • Compliance with Legal Requirements: If required by law, regulation, or legal process, we may disclose personal information to regulatory authorities, law enforcement agencies, or other government bodies.
   • Business Transfers: In the event of a merger, acquisition, or sale of our assets, user information may be transferred as part of the transaction.
   • Protection of Rights: If necessary, we may share data to enforce our policies, protect against fraudulent activity, or address security concerns.
   • Service Providers and Partners: We may share limited information with trusted third-party service providers who assist in operating our platform, such as cloud hosting and customer support providers. These providers are required to uphold data protection standards.
6. Your Rights and Choices Users have certain rights regarding their personal information, including:
   • Access and Updates: Users can review and update their personal data through their account settings.
   • Data Deletion: Users may request the deletion of their account and associated data, subject to certain legal and operational requirements.
   • Opt-Out Options: Users can opt out of non-essential communications, such as marketing emails, by adjusting their preferences.
   • Data Portability: Where applicable, users may request a copy of their data in a structured format.
   To exercise any of these rights, users may contact us via the methods outlined in the "Contact Us" section.
7. Contact Us If you have any questions, concerns, or requests regarding your privacy or data protection, please reach out to us through our ticketing system on the ProductEnv platform or via email at [email protected]. We aim to respond to inquiries promptly and ensure that all privacy-related concerns are addressed appropriately.
8. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. Any modifications will be posted on this page, and we encourage users to review this policy regularly to stay informed about how we protect their data. Continued use of ProductEnv after updates signifies acceptance of the revised policy.