Privacy Policy

This Privacy Policy describes how Onbeat Analytics LLC ("Onbeat", "we", "us", "our") collects, uses, and shares personal information when you use DOEPilot, AnalysisPilot, our websites, and related services (collectively, the "Services").

1. Information We Collect

Account information. When you sign up, request beta access, or purchase a license, we collect your email address, name, and (for educator applications) faculty profile URL.

Payment information. When you purchase a subscription or one-time license, payment is processed by Stripe, Inc. We receive metadata about the transaction (amount, plan, customer ID, subscription status) but never see or store your full payment card details. Stripe's privacy policy governs the payment data they process: https://stripe.com/privacy.

Usage and telemetry. Our desktop applications may report non-personal usage data (feature usage, crash reports, app version, OS version) to help us improve the product. We do not collect the contents of your experiments or analyses.

Server logs. When you interact with our APIs or websites, our servers log IP addresses, timestamps, request paths, and user-agent strings. These logs are used for rate-limiting, security monitoring, and debugging.

Cookies. Our websites use a minimum of strictly-necessary cookies for session management on the admin and management pages. We do not use tracking or advertising cookies.

2. How We Use Information

We use the information we collect to:

• Create and manage your account and license
• Process payments and subscription changes
• Send transactional emails (license keys, password resets, receipts, security notices)
• Provide customer support
• Detect and prevent fraud, abuse, and security incidents
• Improve our products and services
• Comply with legal obligations

We do not sell your personal information. We do not share it with third parties for advertising purposes.

3. Who We Share Information With

We share information with the following categories of service providers, only as necessary to deliver the Services:

• Stripe — payment processing
• Resend — transactional email delivery
• Railway — backend hosting
• Vercel — website hosting
• Cloudflare — content delivery (release downloads)
• Microsoft Azure — code signing, application telemetry

Each provider has its own privacy policy. We do not authorize them to use your information for their own purposes beyond delivering our Services.

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of Onbeat, our users, or others.

4. Data Retention

We retain account and license information for as long as your account is active, plus up to 24 months thereafter for tax, legal, and operational purposes.

Server logs are retained for up to 90 days.

You may request deletion of your account at any time by emailing privacy@onbeatanalytics.com.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Receive your information in a portable format

To exercise these rights, email privacy@onbeatanalytics.com. We will respond within 30 days.

6. Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No system is perfectly secure; if we become aware of a security incident affecting your data, we will notify you in accordance with applicable law.

7. Children's Privacy

The Services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact privacy@onbeatanalytics.com.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or via a notice on our websites. Continued use of the Services after the effective date of the revised policy constitutes acceptance.

9. Contact