Privacy Policy

Canary Edge ("we", "our", or "us") operates the Canary Edge platform and website. This Privacy Policy describes how we collect, use, store, and protect your information when you use our services.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and organization name. Authentication is managed through Clerk, our identity provider, which may collect additional authentication data as described in their privacy policy.

Usage Data

We collect information about how you use the Service, including API call volume, endpoint usage patterns, error rates, and feature utilization. This data helps us improve the Service and monitor for abuse.

Time-Series Data

When you send data to our anomaly detection API, we process the time-series values you submit. This data is used solely to perform detection and, on paid plans, to fine-tune per-machine models. We do not use your time-series data for any other purpose.

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or bank account details on our servers. Stripe collects and processes payment information in accordance with their privacy policy and PCI DSS requirements.

2. How We Use Information

• Provide, maintain, and improve the Service
• Process your API requests and return detection results
• Train and fine-tune per-machine detection models on paid plans
• Send service notifications and security alerts
• Monitor for abuse, fraud, and violations of our Terms of Service
• Generate aggregated, anonymized analytics to improve our models
• Respond to support requests and communicate with you

3. Data Storage and Security

Your data is stored using Supabase, a secure, SOC 2 compliant database infrastructure. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). API keys are hashed before storage. We implement access controls, audit logging, and regular security reviews to protect your data.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase -- Database and data storage infrastructure
• Stripe -- Payment processing and subscription management
• Clerk -- Authentication and user identity management

Each of these providers maintains their own privacy policies and data processing agreements. We select providers that meet our security and privacy standards.

5. Data Retention

We retain your account data for as long as your account is active. Time-series data submitted through the API is retained according to your plan tier: 7 days on the Free plan, 90 days on the Pro plan, and as configured on the Enterprise plan. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Your Rights

GDPR (European Economic Area)

If you are located in the EEA, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent. To exercise these rights, contact us at the address below.

CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of personal information. We do not sell personal information. To exercise these rights, contact us at the address below.

All Users

Regardless of your location, you can request a copy of your data, request deletion of your account and data, and update your account information at any time through the dashboard or by contacting us.

7. Cookies and Tracking

We use essential cookies required for authentication and session management. We do not use third-party advertising trackers. We use anonymized analytics to understand aggregate usage patterns.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service constitutes acceptance of the updated policy.

9. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@canaryedge.com.