Privacy Policy
This Privacy Policy explains how Githon LLC ("Githon", "we", "us") collects, uses, and shares information when you use ioenv, including the website at ioenv.com, the dashboard at app.ioenv.com, the ioenv API, CLI, and SDKs, and other services we operate under the ioenv.com domain (together, the "Services").
1. Information we collect
Account information
When you sign in with GitHub or Google, we receive your name, email address, profile picture, and the account identifier from that provider. When you sign up with email, we collect your email address and the credentials you set. We use this information to create and secure your account.
Content you store
The Services store the environment variables, secrets, API keys, and configuration that you or your organization add. Secret values are encrypted at rest with AES-256. We access this content only to provide the Services to you, for example to deliver a value to your CLI, API client, or integration.
AI proxy usage
When you route AI traffic through the ioenv proxy, we forward your requests to the AI provider that you choose. We record usage metadata such as the provider, model, token counts, cost, and timestamps, so that we can show usage and enforce budgets. We do not store the content of your prompts or of the responses.
Audit and technical data
We keep audit logs of actions in your organization, including the user, the action, the time, the IP address, and the user agent. Our infrastructure also processes standard request data, such as IP addresses, to operate and protect the Services.
Billing information
Payments for paid plans are processed by Stripe. Stripe collects your payment card details. We store only the billing information we need to manage your subscription, such as your plan, billing status, and Stripe customer identifiers. We do not receive or store your card numbers.
Cookies
We use cookies and local storage that are necessary to keep you signed in and to remember your theme and language preferences. We do not use advertising cookies or third-party tracking cookies.
2. Google user data
If you sign in with Google, we request only the openid, email, and profile scopes. We use the name, email address, and profile picture that Google provides only to sign you in, to identify your account, and to contact you about the Services.
- We do not sell Google user data.
- We do not use Google user data for advertising.
- We do not use Google user data to train AI or machine learning models.
- We do not transfer Google user data to others, except as necessary to provide the Services, to comply with law, or as part of a merger or acquisition.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
3. How we use information
- To provide, maintain, and secure the Services.
- To authenticate users and enforce access controls in your organization.
- To process payments and manage subscriptions.
- To send service emails, such as verification, security, billing, and budget alerts.
- To detect, investigate, and prevent abuse, fraud, and security incidents.
- To comply with legal obligations.
4. How we share information
We do not sell your personal information. We share information only in these cases:
- Service providers that process data for us under contract: Cloudflare (hosting, database, and storage), Stripe (payments), and Resend (email delivery).
- AI providers that you select, when you send requests through the ioenv proxy. Their own terms and privacy policies apply to those requests.
- Members of your organization, who can see data and audit logs in that organization according to their role.
- Legal requirements, when we must respond to a valid legal process or protect the rights and safety of users or the public.
- Business transfers, as part of a merger, acquisition, or sale of assets, subject to this Privacy Policy.
5. Data retention
We keep account information and stored content while your account is active. Audit logs are kept for the retention period of your plan. When you delete your account or your organization, we delete the related data, except where we must keep it to comply with law. Copies in backups expire on their normal rotation schedule.
6. Security
We encrypt secret values at rest with AES-256 and encrypt data in transit with TLS. We limit access to production systems. No method of transmission or storage is completely secure. If you find a security issue, contact security@ioenv.com.
7. Your rights
You can access and update your account information in the dashboard. You can ask us to access, correct, export, or delete your personal information by contacting support@ioenv.com. Depending on where you live, you can have additional rights under laws such as the GDPR or the CCPA. We will respond to requests as those laws require. You can also revoke ioenv's access to your Google account at any time in your Google Account settings.
8. International transfers
Githon LLC is based in the United States. Our service providers can process your information in the United States and other countries. When we transfer information, we use appropriate safeguards as required by law.
9. Children
The Services are not directed to children under 16, and we do not knowingly collect personal information from them.
10. Changes to this policy
We can update this Privacy Policy from time to time. We will post the new version on this page and change the effective date. If the changes are material, we will notify you by email or in the Services.
11. Contact
Githon LLC
Email: support@ioenv.com