Trust & Compliance

Security & data practices

We only use public data. No private accounts are ever accessed.

Data sources

Public website headers & HTML
Public documentation subdomains
Public careers pages & job feeds

We do not access private accounts, gated content or personal data.

Payments

All payments are processed by Stripe, a PCI-DSS Level 1 certified processor. We never store credit card details — card data goes directly to Stripe.

Compliance

GDPR — data processed on lawful bases; you can request erasure via support
Data processing regions — EU / US infrastructure
No cookies for tracking — anonymous analytics only

Roadmap

SOC2 Type I & II audits are planned as the company scales. Until then, this page documents our practices transparently.