Privacy Policy

Introduction

This Privacy Policy explains how 802.Software ("we", "us", or "our") collects, uses, and protects your information when you use the StackPilot mobile application (the "App") and related services.

StackPilot is a third-party Heroku management application that helps you monitor, manage, and control your Heroku applications from your mobile device. The app provides features including app monitoring, log viewing, dyno scaling, webhook management, build tracking, and incident monitoring.

By using StackPilot, you consent to the collection and use of information as described in this policy. If you do not agree with this policy, please do not use the app.

1. Who We Are

StackPilot is developed and operated by 802.Software, an independent software development company based in South Burlington, Vermont, specializing in mobile development tools and productivity applications.

2. Scope

This Privacy Policy applies to:

• The StackPilot mobile application for iOS
• Related web services and APIs we operate
• Support, documentation, and policy webpages
• All features and services provided through StackPilot

3. Information We Collect

A. Account and Authentication Information

• Email Address: For account creation and communication
• Full Name: Displayed in your profile
• Password: Securely hashed, never stored in plain text
• Profile Photo: Optional avatar image
• Heroku API Key or OAuth Token: To access your Heroku applications via Heroku's API

B. Heroku Application Data (via Heroku API)

Note: This data is fetched from Heroku's API based on your authorization and is not stored permanently on our servers except where noted.

• Application Names: Names of your Heroku apps
• Dyno Information: Dyno types, quantities, and status
• Build Information: Build statuses, logs, and history
• Webhook Configurations: Webhook URLs and settings you configure through StackPilot
• Application Logs: Fetched in real-time, not stored on our servers
• Application Metrics: Performance and usage metrics from Heroku

C. Usage and Device Information

• Device Information: Device model, OS version, app version
• Usage Data: Features used, screens viewed, session duration
• Error Logs: Crash reports and diagnostics
• Push Notification Tokens: For sending app notifications

D. Subscription and Payment Information

Payment processing is handled by Apple App Store. We do NOT store your payment card information.

• Subscription Status: Free, trial, or premium plan status
• Purchase Receipts: App Store transaction records

4. How We Use Information

4.1 Core Service Delivery

• Heroku Integration: Connect to Heroku API using your credentials
• App Management: Display and manage your Heroku applications
• Monitoring: Track builds, deployments, and application health
• Notifications: Send alerts about builds, webhooks, and incidents
• Log Viewing: Stream and display application logs from Heroku

4.2 Service Improvement

• Feature Development: Analyze usage to develop new features
• Bug Fixes: Diagnose and resolve technical issues
• Performance: Optimize app speed and reliability

What We DON'T Do

• ❌ NO Advertising: We do not use your data for advertising
• ❌ NO Data Selling: We never sell your personal information
• ❌ NO Cross-App Tracking: We do not track you across other apps
• ❌ NO Access to Heroku Code: We only access metadata, not your application source code

5. Information Sharing and Disclosure

5.1 Third-Party Service Providers

5.2 What We DON'T Share

6. Heroku API Integration

6.1 Heroku API Permissions

When you connect StackPilot to Heroku, we request access to:

• Read application information (names, status, formations)
• Read build information (build status, logs)
• Create and manage webhooks (if you use webhook features)
• Scale dynos (if you use scaling features)
• View application logs (streamed in real-time, not stored)

6.2 Data Not Stored on Our Servers

The following data is fetched on-demand from Heroku and NOT permanently stored:

• Application logs (streamed in real-time only)
• Real-time dyno metrics
• Live application status

6.3 Heroku's Responsibility

Heroku (Salesforce) is responsible for:

• Security and privacy of your Heroku account and applications
• API availability and functionality
• Storage and protection of your application code and data

Heroku Privacy Policy: https://www.heroku.com/policy/privacy

7. Data Security

7.1 Security Measures

• Encryption in Transit: All data uses TLS/SSL encryption (HTTPS)
• Encryption at Rest: API keys and sensitive data encrypted in database
• Secure Authentication: Password hashing (bcrypt), JWT tokens
• Access Controls: Role-based permissions
• API Key Storage: Heroku API keys encrypted before storage

7.2 Your Security Responsibilities

• Keep your Heroku API key confidential
• Use a strong, unique password for StackPilot
• Log out from shared devices
• Review connected apps in Heroku dashboard regularly
• Revoke API access if you suspect unauthorized use

8. Data Retention

When you delete your account, all personal data is removed within 30 days.

9. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request removal of your data
• Portability: Receive your data in machine-readable format
• Disconnect: Remove Heroku API key authorization at any time

How to Exercise Your Rights

• In-App: Settings → Account → Privacy Controls
• Email: privacy@802.software
• Phone: +1 (802) 345-2998

10. Push Notifications

Notification Types

• Build Notifications: Build success/failure alerts
• Webhook Notifications: Webhook delivery status
• Incident Notifications: Heroku platform incident alerts
• System Alerts: Important app updates

Manage notification preferences: Settings → Notifications

11. Third-Party Services

Heroku Platform: StackPilot integrates with Heroku's public API. Your use of Heroku is governed by Heroku's Terms of Service and Privacy Policy.

• Heroku Terms: https://www.heroku.com/policy/tos
• Heroku Privacy: https://www.heroku.com/policy/privacy

12. International Data Transfers

Your information may be processed in the United States where our servers are located. By using StackPilot, you consent to international data transfer.

Data Transfer Safeguards

• Encryption of all data in transit
• GDPR-compliant data processing agreements
• Standard Contractual Clauses for EU users

13. Children's Privacy

StackPilot is not intended for users under 16. We do not knowingly collect information from children.

If you believe a child has provided information to us, contact us at privacy@802.software and we will delete it promptly.

14. Changes to This Privacy Policy

We may update this policy from time to time. When we make material changes:

• We will update the "Last Updated" date
• We will notify you via email or in-app notification
• We will provide at least 30 days notice for material changes

15. Contact Us

For questions or concerns about this Privacy Policy or your data: