Privacy Policy

1. Who we are

This policy explains how SureProgramming LLC ("SureProgramming", "we", "us") handles personal information when you visit sureprogramming.com, create an account, or use our dashboard, APIs, SDKs, widgets, MCP server, and agent integrations (the "Service"). Words like "Service" have the same meaning as in our Terms of Service.

This policy covers two kinds of information:

• Information about you, as a visitor or account holder. We decide how this is used.
• Information about your app's users that your apps send to us, such as crash reports and feedback. You decide how this is used, and we process it on your behalf (see section 4).

2. Information we collect about you

Information you give us

• Account details: your name, email address, and password. We store passwords only as a one-way hash (Argon2id), never in readable form.
• Your Content: the projects, features, tasks, backlog items, documents, labels, milestones, and security assessment answers you create.
• Billing details: when you subscribe to Pro, Stripe collects your payment card and billing address. We receive and store your Stripe customer and subscription IDs, your plan, billing period, and renewal date, but never your full card number.
• Messages: what you send us when you email support or give us feedback.

Information collected automatically

• Session and security data: when you sign in, we record your IP address, browser user agent, and session times. We use this to keep you signed in, protect your account, and prevent abuse (for example, rate limiting login attempts).
• API and agent usage: when you use API keys, SDK keys, or agent tokens, we record when and from which IP address they were last used.
• Server logs: our hosting servers keep standard web logs (IP address, requested page, date and time, and browser) for security and troubleshooting.
• Usage counts: we count crash events and feedback items per month to apply your plan's limits.

3. How we use information about you

• To provide the Service: create your account, run the tools you enable, and show you your data.
• To process payments, apply plan limits, and send receipts and billing notices.
• To send service emails, such as email verification, password resets, security alerts, crash alerts you've turned on, and important changes to the Service or these policies.
• To keep the Service secure, prevent fraud and abuse, and fix problems.
• To understand which features are used so we can improve the Service. We do this with our own data, not third-party analytics.
• To meet legal obligations, such as tax and accounting rules.

We don't sell your personal information, we don't share it for targeted advertising, and we don't use it to train AI models.

4. Information about your app's users

When you add our SDKs or feedback widget to your apps, your apps can send us information about the people who use them, including:

• Crash reports, events, and sessions: error messages and stack traces, app version, operating system, device model, environment, IP address, a user identifier if your app sets one, breadcrumbs, custom data, and attachments your app includes.
• User feedback: the feedback text, the user's name and email address if they choose to enter them, the page URL, browser user agent, IP address, and any attachments.

For this information, the developer who owns the project controls what is collected and how it is used, and SureProgramming acts as their service provider. We only use it to provide the Service to that developer, to keep the Service secure, and as required by law. If you are a user of an app that uses SureProgramming and have a question or privacy request, please contact that app's developer. If you contact us, we will forward your request to them.

5. Who we share information with

We share information only with service providers who help us run the Service, under contracts that limit how they can use it, and only as needed:

• InMotion Hosting hosts our website, servers, and database in the United States.
• MailChannels delivers the emails we send.
• Stripe processes payments, calculates sales tax, and runs the billing portal. Stripe handles your payment details under its own privacy policy.
• YouTube (Google) provides the tutorial videos in the dashboard. Video thumbnails load from YouTube, and when you play a video it is streamed from YouTube, which may set cookies under Google's privacy policy.

We also send data where you tell us to, such as alert notifications to Slack, Discord, or webhook URLs you configure, and project data to AI coding assistants you connect with an agent token or our MCP server. Those services handle the data under their own policies.

We may disclose information if required by law, to protect the rights, safety, or property of our users or the public, or as part of a merger, acquisition, or sale of our business (in which case we will notify you and this policy will continue to apply to your information).

6. Cookies

We use one essential cookie, sp_session, to keep you signed in. It is secure and not readable by scripts, lasts up to 7 days, and stops working after an hour of inactivity. We don't use advertising cookies, tracking pixels, or third-party analytics. Stripe sets its own cookies on its checkout and billing pages to process payments and prevent fraud, and YouTube may set cookies when you play a tutorial video.

7. How long we keep information

• Account information and Your Content: kept while your account is open. When you close your account, we delete it within 30 days, except where we must keep it longer by law.
• Crash data: your dashboard shows crash history for your plan's window (30 days on Free, 90 days on Pro). Project owners can set a retention period for each project, and occurrences, events, and sessions older than that period are deleted automatically.
• Billing records: kept for as long as tax and accounting laws require, which is usually several years.
• Security logs: kept only as long as needed for security and troubleshooting.
• Backups: deleted data may stay in backups for a short time until they are overwritten.

8. How we protect information

We use HTTPS for all traffic, secure session cookies, hashed passwords and API key secrets, rate limiting, and access controls that limit each account to its own projects. No system is perfectly secure, but if we learn of a breach that affects your personal information, we will notify you as required by law.

9. Your choices and rights

You can view and update your account details in Settings, and export your project data. You can also email us to:

• get a copy of the personal information we hold about you;
• correct information that's wrong;
• delete your account and personal information; or
• object to or limit how we use it.

We will respond within 30 days and may need to verify your identity first. We won't treat you differently for using these rights. Depending on where you live (for example, California, other U.S. states with privacy laws, the European Economic Area, or the United Kingdom), you may have additional rights, and you can complain to your local data protection authority.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: to perform our contract with you (providing the Service and billing), our legitimate interests (security, fraud prevention, and improving the Service), legal obligations (tax and accounting), and your consent where we ask for it.

You can stop receiving non-essential emails at any time using the unsubscribe link in them. We will still send emails required to run your account, such as security and billing notices.

10. International users

SureProgramming is based in the United States, and we store and process information in the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S.

11. Children

The Service is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will email you or show a notice in the dashboard before they take effect. The date at the top shows when it was last updated.

13. Contact us

For privacy questions or requests, contact: