Privacy Policy

Last updated: January 2025

At Cronicorn, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our job scheduling platform.

Information We Collect

Account Information

When you create an account, we collect information such as your name, email address, and authentication credentials (via GitHub OAuth or other supported providers).

Usage Data

We automatically collect information about how you interact with our service, including:

  • Job configurations and scheduling preferences
  • API requests and responses
  • Execution logs and performance metrics
  • Device and browser information
  • IP addresses and timestamps

Payment Information

For paid subscriptions, payment information is processed securely through our payment processor (Stripe). We do not store complete credit card numbers on our servers.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process your transactions and manage your subscription
  • Send you technical notices, updates, and security alerts
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze usage patterns and trends
  • Detect, prevent, and address technical issues and fraudulent activity
  • Optimize AI-powered scheduling recommendations

Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with any merger, sale, or acquisition of all or part of our company
  • With Your Consent: When you explicitly authorize us to share specific information

Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption in transit (TLS/SSL) and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Automated backups and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as your account is active or as reasonably needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Different types of data may be retained for different periods based on their purpose and legal requirements.

You may request deletion of your account and associated data at any time by contacting us at [email protected]. We will delete your data within a reasonable timeframe, except where we are required by law to retain certain information (such as payment records for tax purposes) or for legitimate business purposes (such as preventing fraud or enforcing our Terms).

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data
  • Portability: Request transfer of your data in a machine-readable format
  • Objection: Object to certain processing activities
  • Restriction: Request restriction of processing in certain circumstances
  • Withdraw Consent: Withdraw consent for processing based on consent

To exercise these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe as required by applicable law.

Additional Rights for European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to provide our services
  • Legitimate Interests: Improving our services, fraud prevention, security
  • Legal Obligations: Compliance with applicable laws and regulations
  • Consent: Where you have given explicit consent (you may withdraw at any time)

International Data Transfers

Your personal data may be transferred to and processed in the United States and other countries where our service providers operate. We take steps to ensure your data is protected in accordance with applicable data protection laws, including through contractual safeguards with our service providers.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: Request disclosure of personal information we collect, use, and disclose
  • Right to Delete: Request deletion of personal information we have collected
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt-out of the sale or sharing of personal information (Note: We do not sell personal information)
  • Right to Limit: Limit the use and disclosure of sensitive personal information
  • Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

Categories of Personal Information We Collect: Identifiers (name, email, IP address), commercial information (subscription details), internet activity (usage logs), and inferences (scheduling preferences).

We Do Not Sell Personal Information: We do not sell your personal information to third parties and have not sold personal information in the preceding 12 months.

To exercise your California privacy rights, contact us at [email protected]. We will verify your identity before processing your request.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by law. Our notification will include information about the nature of the breach, the data affected, potential consequences, and steps we are taking to address it.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings. Note that disabling cookies may limit your ability to use certain features of our service.

Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us:

Email: [email protected]

GitHub: GitHub Issues