Introduction
Latchkey ("we," "our," or "us") is committed to protecting the privacy and security of your data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website located at https://www.latchkey.dev/ (the "Site") and our AI-powered CI/CD monitoring services (the "Service").
By using our Service, you agree to the collection and use of information in accordance with this policy.
Effective Date: November 26, 2025
Contact: kaveh@latchkey.dev
Information We Collect
We collect only the minimum amount of data required to provide actionable insights and optimize your pipelines.
Account & Billing Information
- Authentication: We utilize managed authentication services (e.g., GitHub OAuth). We do not collect, view, or store your passwords.
- Billing: All payments are processed securely by our third-party payment processor, Stripe. We do not collect or store your credit card numbers, bank account details, or financial information on our servers.
Pipeline & Usage Data
When you integrate Latchkey with your CI/CD provider (e.g., GitHub Actions), we collect specific metadata via their APIs:
- Workflow Metadata: Run IDs, job names, timestamps, failure/success statuses, and duration metrics.
- Resource Usage: CPU and memory usage statistics used to calculate cost efficiency.
- Log Data: Build logs and error messages required to identify bottlenecks and failures.
NO Source Code Collection
We do not collect, store, or read your proprietary source code. Our integration analyzes metadata, configuration files (e.g., YAML workflow files), and logs. We do not clone your repositories or retain copies of your intellectual property.
How We Use Your Information
We use the collected data for the following purposes:
Service Delivery
To generate analytics dashboards, cost reports, and optimization insights.
AI Model Training
You acknowledge and agree that we have the right to use collected metadata, logs, and usage patterns (but not your source code) to train, fine-tune, and improve our artificial intelligence models, both now and in the future. This allows us to provide better predictive insights and anomaly detection for all users.
Security & Reliability
To detect technical issues, security risks, or abuse of the Service.
Data Sharing and Disclosure
We do not sell, trade, or rent your personal data to third parties.
We do not share your data with third-party vendors for marketing or advertising purposes.
Infrastructure Sub-Processors
The only "sharing" that occurs is the strictly necessary transfer of encrypted data to our trusted infrastructure providers solely to operate the Service:
Cloud Hosting
(e.g., AWS, Azure, Vercel) to host our application and database.
Payment Processing
(Stripe) to facilitate your subscription payments.
These providers are contractually obligated to protect your data and are prohibited from using it for any other purpose.
Data Security
We utilize industry-standard security measures, including encryption in transit and at rest. Because we do not store passwords or payment info, the risk of critical credential theft from our systems is significantly minimized.
Data Retention
We retain pipeline metadata and logs for the duration determined by your subscription plan to provide historical analytics. You may request the deletion of your account and associated data at any time by contacting support.
Your Privacy Rights
Depending on your location (e.g., GDPR, CCPA), you may have rights regarding access, correction, or deletion of your personal data. To exercise these rights, please contact us.
Third-Party Services
This section is intentionally omitted as the main Privacy Policy document does not list specific third-party services. Please refer to the Data Sharing and Disclosure section above for information about our infrastructure providers.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
Latchkey Support
Policy Updates
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on our platform. Your continued use of our services after such notice constitutes acceptance of the updated policy.