Privacy Policy
1. Who we are
Feasify is operated by WiseBits Limited, a company registered in Ireland under number 578282, with its registered office at 86 Ivy Exchange, Parnell Street, Dublin 1, Ireland (“we”, “us”). We are the controller of the personal data described in this policy.
Questions and requests about your data: support@feasify.dev.
2. What this policy covers
This policy covers data about the people who hold Feasify accounts and visit this site. The scheduling data you send to the API is different: we handle it as a processor on your behalf, as set out in section 6 of the Terms of Service, and it is summarised in section 5 below.
3. What we collect
- Your email address. An account is identified by an email address, and it is the only identifying detail we store about you.
- Sign-in data. If you sign in with an emailed code, we send the code through our email provider and keep only a keyed hash of it. If you sign in with Google, Google shares your email address and basic profile with us; we keep only the verified email address.
- API keys. Stored only as hashes. We cannot read a key back after it is issued.
- Usage records. For each request: when it ran, how large it was, how long it took, and its outcome. These are needed for billing and capacity management.
- Billing data. Payments are handled by Stripe. We receive your Stripe customer and subscription identifiers, your plan and subscription status, and the brand and last four digits of your card for display. We never receive full card details.
- IP addresses. Used to limit the rate of sign-in and checkout attempts, to protect accounts against abuse.
4. Why we use it
- To provide the service you signed up for — your account, sign-in, API access, billing, and service notices. The legal basis is the performance of our contract with you.
- To keep the service secure — rate limits, abuse prevention, and diagnosing faults. The legal basis is our legitimate interest in running a secure, reliable service.
- To meet legal obligations, such as keeping tax and accounting records.
We do not sell your data, use it for advertising, or make automated decisions about you that have legal or similarly significant effects.
5. Scheduling data you send to the API
Requests describe people by identifiers you choose, never by name, and are held only transiently: results are deleted one hour after a solve finishes. Requests and results are never written to our durable database.
6. Who we share it with
We use a small number of providers, each only for its own part:
- Stripe — payments and subscriptions. Purchases are sold through Stripe’s Link service, which acts as the seller of record and handles your payment details, receipts, and payment support under its own privacy policy.
- Resend — delivery of sign-in codes and account notices.
- Google — only if you choose to sign in with Google.
- Hosting — the servers and databases that run the service are located in the EU. Where a hosting provider operates them, it acts only on our instructions.
Stripe, Resend, and Google may process data outside the European Economic Area. Where they do, the transfer relies on safeguards recognised under EU law, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
7. Cookies
This site sets only cookies that are strictly necessary for it to work:
se_session— keeps you signed in.se_csrf— protects account actions against cross-site request forgery.se_oauth_stateandse_oauth_return— set only during Google sign-in, and cleared when it completes.
We use no analytics, advertising, or tracking cookies. Stripe’s checkout and billing pages set their own cookies on Stripe’s domain.
8. How long we keep it
- Sign-in codes: 15 minutes.
- Sign-in sessions: 14 days, or until you sign out.
- Rate-limit counters keyed by IP address or email: up to one hour.
- Scheduling results: one hour after the solve finishes.
- Your email address, API key hashes, and usage records: while your account exists. When you close your account or ask us to delete it, we delete them, except records we must keep for tax and accounting.
9. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. Email support@feasify.dev from the address on your account. We respond within one month.
You can also complain to the Irish Data Protection Commission at dataprotection.ie, or to the data protection authority where you live or work.
10. Changes to this policy
We may update this policy. Material changes will be announced to account holders before they take effect, and the date above always shows the latest version.