Privacy Policy

1. What This Policy Covers

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use our website, software, APIs, and related services (collectively, the Service).

Your use of the Service is also subject to our Terms of Service. If you continue using the Service after this policy is updated, you accept the revised policy.

This policy covers Personal Data and Operational Data we process when you use the Service.

Personal Data: Information that identifies you or your organization, such as name, email, and billing details.

Operational Data: Technical and product-usage data, such as device and agent heartbeats, tool and model identifiers, token counts, latency, status, estimated cost signals, logs, diagnostics, and event telemetry. Optional Signals work context is Operational Data when enabled for your organization.

2. Your Data Is Yours

You retain ownership of the content, telemetry, and materials you submit to or process through the Service (Your Data).

We process Your Data only as needed to provide, secure, maintain, and support the Service, and as otherwise described in this policy.

We do not sell Your Data for third-party advertising or any other purpose.

We do not use Your Data—including private work context, prompts, session detail, or organization telemetry—to train foundation models or other general-purpose AI models.

We may use aggregated or de-identified information that cannot reasonably identify you or your organization to understand product performance and improve reliability.

3. Data We Collect

Depending on how you use the Service, we may collect:

Account data: Name, email, password hash, organization name, account identifiers, and role or membership metadata.

Billing data: Subscription plan, transaction metadata, invoice identifiers, tax region metadata, and Lemon Squeezy customer or subscription identifiers.

Device and network data: IP address, browser, OS, device metadata, and agent enrollment identifiers.

Usage and diagnostics: Feature usage, device and agent heartbeats, tool and model identifiers, token counts, latency, status, estimated cost signals, logs, crash reports, and performance data.

Optional Signals work context: When enabled for your organization, richer work-session metadata you choose to retain. Detail level is configurable and can be turned off.

Support data: Information you provide in support messages, feedback, or contact forms.

Connected service metadata: Integration status and required technical identifiers for tools or services you authorize.

4. What We Do Not Collect

Keystrokes, screenshots, or browser surveillance.

Full network interception of developer traffic.

Hours-in-editor time tracking in the style of classic productivity trackers, unless you explicitly configure optional Signals features that capture related work context.

5. Sources of Data

Directly from you (account signup, support, forms, settings, and organization configuration).

Automatically from your use of the Service and enrolled devices or agents.

From connected third-party services that you authorize.

From billing providers for payment and subscription lifecycle events.

6. How We Use Data

Provide, maintain, and secure the Service.

Authenticate users and prevent fraud or abuse.

Process billing, subscriptions, invoices, and payment-related events.

Show observability insights such as tool and model usage, estimated cost, latency, plan utilization, and device health.

Diagnose bugs and improve reliability and product performance.

Provide support and communicate service updates.

Comply with legal obligations and enforce our Terms.

We do not sell Personal Data or Operational Data for third-party advertising. We do not use your private product or work content to train foundation models.

7. Self-Hosted Deployments

When you self-host UseJunction, telemetry and Operational Data stay on systems you control, subject to your own policies and the UseJunction Community License.

This Privacy Policy primarily describes our hosted website and managed Service. For self-hosted deployments, review your deployment configuration and the source under the UseJunction Community License for exact behavior.

8. Lemon Squeezy and Payments

We use Lemon Squeezy to process payments and subscription billing. Lemon Squeezy acts as Merchant of Record for checkout transactions.

Payment details are processed by Lemon Squeezy and its payment partners. We receive subscription and transaction metadata needed to manage your account and entitlements.

Lemon Squeezy may collect and process taxes based on transaction jurisdiction. Their policies apply to payment processing: https://www.lemonsqueezy.com/privacy and https://www.lemonsqueezy.com/buyer-terms.

9. How We Share Data

We may share data with:

Service providers that host, secure, operate, and support the Service.

Payment processors and billing providers for subscription and transaction workflows.

Integration partners you explicitly connect.

Professional advisors and legal authorities where required by law.

Successors in connection with merger, acquisition, or sale of assets.

We may also share aggregated or de-identified information that cannot reasonably identify an individual or organization.

We do not sell your data.

10. Cookies and Similar Technologies

We use cookies and similar technologies to keep sessions secure, remember settings, and analyze usage.

You can manage cookies in your browser settings. Some features may not function correctly if cookies are blocked.

11. Security

We use reasonable technical and organizational safeguards, including encryption in transit, access controls, and security monitoring. No system can be guaranteed completely secure.

12. Data Retention

We do retain data. We keep Personal Data and Operational Data for as long as needed to provide the Service, maintain observability history for your organization, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods vary by data type, account status, organization settings, contractual requirements, and legal obligations.

When you delete an account or request deletion, we delete or anonymize data that is no longer required, except where we must retain records for legal, security, billing, or dispute-resolution purposes.

Self-hosted deployments control retention on their own infrastructure.

13. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your data.

You may also object to or restrict certain processing, and you may request account deletion. We may need to verify your identity and retain certain records where required by law.

Organization admins can configure optional Signals detail levels and turn richer work context off.

14. Cross-Border Data Processing

We and our providers may process data in the United States and other countries. These locations may have different data protection laws from your country.

15. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18.

16. Changes to This Policy

We may update this Privacy Policy from time to time. If material changes are made, we will provide notice by posting on the Site, by email, or by another reasonable method.

17. Contact

For privacy questions or requests, contact hello@usejunction.dev.

FAQ

Do you sell my data?

No. We do not sell Personal Data or Operational Data for advertising or any other purpose.

Do you use my data to train AI models?

No. We do not use your private product data, work context, or organization telemetry to train foundation models or other general-purpose AI models.

Do you retain my data?

Yes. We retain data as needed to operate the Service, maintain your organization's observability history, meet legal obligations, and resolve disputes. Retention varies by data type and account status.

Who owns my data?

You do. You retain ownership of Your Data. We only process it to provide and secure the Service.