LegalWelcome to Expanso Inc.
("Expanso," "we," "us," or "our").
We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect the information we collect when you visit our website (expanso.io), use Expanso Cloud (cloud.expanso.io), or connect Expanso Cloud to ChatGPT. By accessing our website or services and providing your personal information, you agree to the terms and conditions of this Privacy Policy.
Information we collect.
PERSONAL INFORMATION
When registered and posting, we record the IP address that the post originated from. We also may retain server logs that include the IP address of every request to our server.
USAGE INFORMATION
We may use your personal information to:
Customize your experience on our website to meet your specific needs. Improve our site offerings based on the information and feedback we receive from you. Enhance customer service by effectively responding to your requests and support needs. Send you information, notifications, or responses to inquiries or questions you may have.
EXPANSO CLOUD
When you use Expanso Cloud, we collect:
Account information, such as your name and email address, and the account you sign in with.
Organization information, such as the organizations and workspaces you belong to, your role, and invitations you send.
Data you put into Expanso Cloud, such as your pipelines and nodes, and the metrics, health and logs your nodes send us. We use it to run the service for you.
Usage and diagnostic information, such as how you use Expanso Cloud, which campaign or website brought you to it, error reports, and feedback you send us.
CHATGPT PLUGIN
If you connect Expanso Cloud to ChatGPT, we keep a record of your approval and of ChatGPT's access. Our tools send ChatGPT your name, email address and account ID, so it can show which account is connected. When you ask ChatGPT about your account, they also send your role in each organization and information about the workspaces, pipelines, deployments, runs and nodes you can access.
Use of collected information.
PERSONAL INFORMATION
We may use your personal information to:
Personalize your experience on our website and respond to your individual needs. Improve our site offerings based on the information and feedback we receive from you. Enhance customer service by effectively responding to your requests and support needs. Send you information, notifications, or responses to inquiries or questions you may have.
USAGE INFORMATION
We may use usage information to:
Understand and save your preferences for future visits. Compile aggregate data about site traffic and interaction to offer better site experiences and tools in the future. Contract with third-party service providers to assist us in understanding our site visitors.
EXPANSO CLOUD AND CHATGPT
We use this information to:
Provide Expanso Cloud: sign you in, run your pipelines, and show you and your organization what you have access to.
Answer your questions in ChatGPT, when you connect it.
Send you service emails, such as sign-in links and invitations.
Keep Expanso Cloud secure, find and fix errors, and improve it.
Contact you about Expanso's products and services, and learn which campaign or website brought you to Expanso Cloud.
Data retention policy.
We will make a good faith effort to:
Retain server logs containing the IP address of all requests to this server for no more than 90 days. Retain the IP addresses associated with registered users and their posts for no more than 5 years.
For Expanso Cloud, we keep:
Account and organization information for as long as your account exists, and delete it within 30 days after you ask us to.
Data you put into Expanso Cloud until you delete it or your organization is deleted.
ChatGPT's access: its access tokens expire after one hour, and its refresh tokens after 30 days without use. We keep the record of your approval and of ChatGPT's access for as long as your account exists, or until you ask us to remove it.
Logs, error reports and usage information for up to 90 days, except records of how many nodes each workspace runs, which we keep for as long as we need them for billing, even after the workspace or your account is deleted.
Backups for up to 30 days.
Data security.
We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee its absolute security.
Cookieless visit counting (Scarf).
For every visitor, whether or not you accept analytics, each page loads a small image from Scarf, Inc. (static.scarf.sh) so we can count visits anonymously. It sets no cookies and stores nothing on your device, and the cookie banner does not switch it off. Loading the image sends Scarf your IP address, your browser's user agent, and the URL of the page you are viewing.
Scarf states that it "does not store the IP address itself, so no personally identifiable information is retained" (Scarf web traffic documentation). Scarf uses the address to look up business metadata, such as the organization a visit came from, and shows that to us.
The optional analytics you accept or decline in the cookie banner are separate and are unaffected by this.
Information disclosure.
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties unless required by law or for the operation of our website, conducting our business, or servicing you. We may release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety. Non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
For Expanso Cloud, we share personal information with these kinds of recipients:
Service providers that host and run Expanso Cloud for us, such as cloud hosting, logging and monitoring.
Service providers for email delivery, product analytics, error tracking, customer feedback and our customer relationship management (CRM) system.
The AI provider that powers the Pipeline Assistant, which receives your messages and the pipeline you are working on.
The sign-in provider you choose: Google, GitHub or LinkedIn.
OpenAI, if you connect Expanso Cloud to ChatGPT. It receives your account information when you connect, and the information our tools send, as described above, under OpenAI's own privacy policy.
Third party links.
Occasionally, at our discretion, we may include or offer third-party products or services on our site. These third-party sites have separate and independent privacy policies. We have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
Your choices.
In Expanso Cloud, you can change your name in your account settings, leave an organization or delete one you own (other than your personal organization), and revoke API keys.
You can choose whether to allow analytics cookies in the cookie settings.
You can disconnect Expanso Cloud from ChatGPT in ChatGPT's settings.
To access, correct or delete your personal information, to stop marketing emails, or to remove ChatGPT's access on our side, contact us at [email protected].
Children's Online Privacy Protection Act Compliance.
Our site, products, and services are directed to individuals who are at least 13 years old or older. If you are under the age of 13 and this server is in the USA, please do not use this site in compliance with the Children's Online Privacy Protection Act (COPPA).
Online privacy policy only.
This privacy policy applies only to information collected through our website, Expanso Cloud and the Expanso Cloud plugin for ChatGPT, and not to information collected offline.
Your consent.
By using our website or services, you consent to this privacy policy.
Changes to our privacy policy.
If we decide to change our privacy policy, we will post those changes on this page.
