Privacy Policy

1. Overview

This Privacy Policy explains how Polion collects, uses, and protects personal data when you use our website, dashboard, API governance services, and related tools.

2. Data We Collect

We may process the following categories of data:

• Account information such as name, email address, and organization details.
• Usage information such as feature interactions, logs, and audit events.
• Technical metadata such as IP address, browser, and device information.
• Billing-related data handled through third-party payment providers.
• Uploaded or referenced API specification content used for analysis and reporting.

3. How We Use Data

• Provide and operate the Polion platform and related services.
• Authenticate users, secure accounts, and prevent abuse.
• Generate analysis results, reports, and governance insights.
• Process subscriptions, invoices, and account administration tasks.
• Improve platform quality, performance, and reliability.
• Comply with applicable legal obligations.

4. Legal Bases (EEA/UK)

Where applicable, we process personal data based on contractual necessity, legitimate interests, legal obligations, and consent where required.

5. Data Sharing

We do not sell personal data. We may share data with trusted service providers (for hosting, analytics, support, and billing), and with authorities where required by law.

6. Data Retention

We retain data only as long as needed for service operation, legal compliance, dispute resolution, and enforcement of agreements. Retention periods depend on data type and legal requirements.

7. Security

We apply technical and organizational safeguards to protect data, including encryption in transit, access controls, logging, and monitoring. No security measure is absolute.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing activities.

9. Contact

For privacy requests, contact: privacy@polion.io