Privacy Policy
Effective date: 2026-10-04
This policy explains how ParetoOps (“ParetoOps”, “we”, “us”) handles personal data collected through https://paretoops.dev (the “Website”), our interest list, and our sales and support communications. It also explains what the ParetoOps software does and does not collect.
The short version
- The ParetoOps software runs on your machines and CI systems. It sends no telemetry, checks license keys offline and never uploads your evaluation data, prompts, outputs or code to us.
- If you join our interest list, we keep the details you give us so we can tell you about ParetoOps Pro and Enterprise. You can unsubscribe at any time.
- We do not sell your personal data or use it for third-party advertising.
1. Who is responsible
ParetoOps, [email protected], is the controller of the personal data described in this policy. Contact us at [email protected].
2. What we collect and why
| What | When | Why | Legal basis (EEA/UK) |
|---|---|---|---|
| Email address, and optionally name, company, role, CI provider, monthly LLM spend range, plan interest and what you want to solve | You join the interest list | To tell you about Pro and Enterprise, offer trial keys and understand what to build | Consent, which you can withdraw at any time |
| The page or campaign that referred you to the form (page name and UTM parameters) | You join the interest list | To learn which pages are useful | Legitimate interests in improving our Website |
| Name, email address, organization and the contents of your messages | You email us or request support, a trial or a quote | To respond and provide the service you asked for | Performance of a contract, or steps before entering one; legitimate interests |
| Organization name, contact email and GitHub organization names | We issue you a license key | To issue, manage, renew and support your license | Performance of a contract |
| Billing contact and invoice details | You buy a subscription | Billing, accounting and tax compliance | Performance of a contract; legal obligation |
| Pages viewed, approximate location, device and browser information (Google Analytics) | You visit the Website and accept analytics cookies | To understand which pages are useful | Consent |
| IP address and request metadata in server and security logs | You visit the Website | To deliver the Website and protect it from abuse | Legitimate interests in security |
We do not knowingly collect special categories of personal data, and we ask you not to send us any.
3. The ParetoOps software
The ParetoOps command-line tool, Python package and container image process data only on the systems where you run them. They do not send usage data, evaluation results, prompts, outputs or code to us. The software makes network requests only when you configure it to: to the GitHub API with your token (to post pull-request comments), to your own git remotes (to store baselines), and to a pricing-catalog URL you choose. A license key contains the organization name, contact email and plan details we issued it with; it is verified offline.
4. Cookies and analytics
The Website sets no cookies unless analytics are enabled and you choose to accept them. If you
accept, Google Analytics sets cookies whose names begin with _ga to measure page views. You can
change your choice at any time using “Cookie settings” in the Website footer; choosing reject also
deletes analytics cookies already set. We do not use advertising cookies.
5. Who we share data with
We share personal data only with service providers that process it on our behalf, under contracts that require them to protect it and use it only as we instruct:
- Loops (loops.so) hosts our interest list and sends interest-list emails.
- Our website host and content delivery network serve the Website and keep security logs.
- Google provides Google Analytics, only if you accept analytics cookies.
- Our email, accounting and payment providers handle correspondence, invoicing and payments.
We may also disclose personal data if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to it.
6. International transfers
We are based in the United States, and our service providers may process data in the United States and other countries. Where we transfer personal data from the EEA, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum), or on a recipient’s certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, as applicable.
7. How long we keep data
- Interest-list data: until you unsubscribe or ask us to delete it, or after 24 months without engagement, whichever comes first.
- Support and sales correspondence: for up to 3 years after our last contact.
- License, billing and tax records: for as long as the law requires (generally 7 years).
- Website security logs: typically no longer than 30 days.
- Analytics data: according to the retention setting in Google Analytics (14 months).
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to our processing of it, and to withdraw consent at any time (without affecting processing before withdrawal). Every interest-list email has an unsubscribe link. To exercise any right, email [email protected]; we will respond within 30 days and may need to verify your identity. If you are in the EEA, the UK or Switzerland, you may also complain to your data protection authority.
California residents. In the past 12 months we have collected the categories of personal information described in Section 2 (identifiers, professional information, internet activity), for the purposes described there. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information. You have the rights to know, delete and correct personal information and to not be discriminated against for exercising them; contact [email protected].
9. Security
We protect personal data with appropriate technical and organizational measures, including access controls, encryption in transit and minimizing the data we collect. No method of transmission or storage is completely secure.
10. Children
The Website and ParetoOps are intended for professionals and are not directed to children under 16. We do not knowingly collect their personal data.
11. Changes
We will post any changes to this policy on this page and update the effective date. If changes are material, we will tell interest-list subscribers by email before they take effect.
12. Contact
ParetoOps · [email protected] · [email protected]