Privacy Policy

AirflowHub ("we", "us", or "our") operates airflowhub.dev(the "Site"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Site you agree to this policy.

1. Information We Collect

Information you provide directly

• Account registration: When you create an account (via email/password or Google OAuth) we collect your name, email address, and profile information you choose to provide.
• Newsletter sign-up: If you subscribe to our newsletter we collect your email address.
• Contact forms / feedback: Any messages or feedback you send us.

Information collected automatically

• Usage data: Pages visited, time spent, referring URLs, and click interactions.
• Device data: Browser type and version, operating system, screen resolution, and IP address (truncated).
• Cookies & local storage: We use essential cookies (session management, theme preference) and, if you consent, analytics cookies. See Section 5 for details.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the Site and its content.
• Authenticate your account and maintain your session.
• Send transactional emails (password resets, account notifications).
• Send the newsletter if you have subscribed (you may unsubscribe at any time via the link in each email).
• Understand how visitors use the Site to improve user experience.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

We do not sell your personal data to third parties.

3. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data under these legal bases:

• Contract performance — to provide the service you requested (account, newsletter).
• Legitimate interests — for analytics and security, balanced against your privacy rights.
• Consent — for optional analytics cookies, which you can withdraw at any time.
• Legal obligation — where required by applicable law.

4. Data Sharing

We share data only with service providers necessary to operate the Site:

• Hosting & infrastructure: AWS Amplify (hosting), Neon (database). Data may be processed in the United States.
• Authentication:Google OAuth (if you choose "Sign in with Google"). Google's Privacy Policy governs data Google processes.
• Email delivery: A transactional email provider for account-related emails.
• Analytics: Aggregated, anonymised analytics may be processed by a third-party analytics service.

All service providers are bound by data processing agreements and may not use your data for their own purposes.

5. Cookies

We use the following cookie categories:

• Essential cookies (always active): session tokens, CSRF protection, theme preference (light/dark). These are strictly necessary and cannot be disabled.
• Analytics cookies (optional, consent required): anonymised page-view and interaction data to help us improve the Site. You can accept or decline these when first visiting the Site and change your preference in your account settings.

6. Data Retention

• Account data is retained while your account is active and for 90 days after deletion (to allow recovery), after which it is permanently deleted.
• Newsletter subscriptions are retained until you unsubscribe.
• Server logs containing IP addresses are retained for up to 30 days for security purposes.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data (you can edit most information in your profile settings).
• Delete your account and associated personal data.
• Object to or restrict certain processing activities.
• Data portability — receive a copy of your data in a machine-readable format.
• Withdraw consent at any time where processing is based on consent (e.g. analytics cookies).

To exercise any of these rights, email us at privacy@airflowhub.dev. We will respond within 30 days.

8. Security

We implement industry-standard security measures including HTTPS encryption in transit, hashed passwords, and limited access controls. No system is 100% secure; please use a strong, unique password and report any suspected security issues to security@airflowhub.dev.

9. Children's Privacy

The Site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of material changes. The "Last updated" date at the top always reflects the current version. Continued use of the Site after changes constitutes acceptance of the revised policy.

11. Contact

Questions about this policy? Reach us at privacy@airflowhub.dev.