Privacy Policy
Effective 5 November 2026
This policy explains how personal data is handled in Diffbridge at https://diffbridge.mokahub.duckdns.org. The service is run by an individual developer, not by a company ("we"). For questions or requests, use the contact form.
Two kinds of data
- Account data: information about the people who use Diffbridge. We decide how it's used.
- Customer Data: Salesforce metadata, records and files, and other data your workspace connects. We process it only to provide the service, as your workspace's settings and users instruct. Your organisation decides what's in it and how long it's kept; send requests about it to your organisation.
What we collect
| Data | Examples | Why | Legal basis (GDPR) |
|---|---|---|---|
| Account details | Name, email, password hash, sign-in provider, workspace and role | Provide the service, keep accounts secure | Contract |
| Usage and audit records | Deployments, settings changes, sign-ins, IP address and user agent | Security, the workspace's audit log, troubleshooting | Legitimate interests; contract |
| Support messages | What you send through the contact form, including the email you give for a reply | Answer you | Legitimate interests |
We use a session cookie to keep you signed in, and store your theme choice in your browser. We don't use advertising or third-party tracking cookies.
Who we share it with
Only the providers on the Sub-processors page, to run the service. We don't sell personal data. We disclose data only when the law requires it.
Where it's stored
On servers in the United States (Oracle Cloud, Ashburn, Virginia). If you use the service from elsewhere, your data is transferred there.
How long we keep it
- Account data: while the account exists. When you ask us to delete it, it's deleted within 30 days.
- Audit records: as long as the workspace's settings keep them.
- Backups: up to 30 days, then deleted automatically.
- Support messages: until they're no longer needed to help you, or sooner if you ask.
Security
See the Security page.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, or object to or restrict how it's used. Ask through the contact form. We answer within one month. You can also complain to your data protection authority.
Changes
We'll post changes here and update the date above. For material changes we'll also tell users in the app.