Privacy Policy

1. Who we are

Driftn is an infrastructure observability platform built and operated by , Soria, Spain. Contact: hello@driftn.io

2. What data we collect

We collect only what's necessary to provide the service:

• Account data: Your email address, used for authentication and service notifications.
• Platform credentials: API keys you provide (Vercel, Supabase, AWS, etc.). These are stored encrypted and used exclusively to fetch infrastructure data on your behalf.
• Infrastructure data: Metrics, deployment records, cost data and security findings fetched from your connected platforms. This is your data — we process it to power the dashboard.
• Usage data: Anonymous page views via Plausible Analytics (no cookies, GDPR-compliant). We do not track individual users.
• Emails: If you join the waitlist, we store your email to notify you of beta access.

3. How we use your data

• To provide and improve the Driftn service
• To send security alerts, monitoring notifications and the weekly digest (only if you opt in)
• To send you your beta invitation and onboarding emails
• We do not sell, rent or share your data with third parties for marketing
• We do not use your data to train AI models

4. Third-party services

Driftn uses the following sub-processors:

• Supabase (supabase.com) — database and authentication. EU data residency available.
• Railway (railway.app) — backend hosting. US-based.
• Vercel (vercel.com) — frontend hosting. Global CDN.
• Stripe (stripe.com) — payment processing. PCI-DSS compliant. We never see your card number.
• Resend (resend.com) — transactional email delivery.
• Plausible Analytics (plausible.io) — privacy-friendly analytics. No cookies. GDPR compliant.

5. Your rights (GDPR)

If you are based in the EU/EEA, you have the following rights:

• Access: Request a copy of the data we hold about you
• Rectification: Ask us to correct inaccurate data
• Erasure: Ask us to delete your account and all associated data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your data
• Withdrawal: Withdraw consent for monitoring emails at any time in Settings

To exercise any of these rights, email hello@driftn.io. We will respond within 30 days.

6. Data retention

• Account data: retained until you delete your account
• Infrastructure scan history: 90 days rolling window
• Waitlist emails: deleted 30 days after beta launches
• Payment records: 7 years (legal requirement)

7. Security

API keys are stored encrypted at rest. All communication is over HTTPS/TLS. We apply the principle of least privilege — credentials are only used for the specific read operations you authorise.

8. Cookies

Driftn does not use tracking cookies. We use localStorage to store your session token and preferences locally in your browser. Plausible Analytics does not use cookies.

9. Changes to this policy

We'll notify you by email if we make material changes to this policy. The date at the top of this page always reflects the last update.

10. Contact

Questions about your privacy? Email hello@driftn.io — I reply personally.