隐私政策

公司简介

Prilog.ai 由 Prilog Inc.（“Prilog”、“我们”）运营。

联系

一般：hello@prilog.ai
支持：support@prilog.ai
隐私与法律事务：privacy@prilog.ai
地址：2261 Market Street STE 12675, San Francisco, CA 94114, United States

适用范围

This policy describes how we collect, use, and protect personal data for the Prilog.ai website, app, APIs, support, billing, and connected integrations.

账户数据

当您请求访问或登录时提供的姓名、工作电子邮件、角色和组织详细信息。

Product usage data

Product interaction events, feature usage, device and browser details, and performance telemetry needed to run and improve the service.

Integration and customer content

正常 data you connect, such as logs, traces, metrics, error events, stack traces, repositories, code snippets, Pull Request, tickets, alerts, and related configuration.

Integration credentials

OAuth grants, installation identifiers, API tokens, webhook settings, and other credentials or configuration needed to connect systems you authorize.

Billing data

Billing contact, legal name, country, tax identifiers, plan, usage, credits, invoices, receipts, and payment status. Payment methods are handled by our payment processor.

支持和沟通

Messages you send through email, support chat, and product feedback channels, plus any survey responses you provide.

Website and locale data

Cookie or local storage preferences, approximate country or locale from IP lookup, referral details, and website analytics events.

提供服务

Deliver AI 修复 workflows, correlate observability signals, draft fixes, and coordinate tickets, Pull Request, and notifications.

AI 修复 and review

Analyze connected signals and 代码上下文 to produce summaries, suggested patches, test guidance, and review-ready workflow updates. Customer Data is not used to train foundation models or shared model-training datasets.

集成 and routing

Sync data with source-control, observability, issue-tracking, chat, cloud, and support tools that you connect or instruct us to use.

安全可靠

监控滥用情况、维护服务可靠性并保护我们的基础设施。

Billing and administration

Manage subscriptions, usage limits, credits, invoices, taxes, account administration, and customer communications.

产品改进

Analyze usage and feedback to improve features, documentation, and 客户体验, using aggregated or de-identified data where practical.

合同

提供服务并履行我们与您之间的协议所需的处理。

合法权益

运营、保护和改进服务，并与您的权利保持平衡。

同意

法律要求时的营销传播或可选分析。

法律义务

遵守适用的法律、会计和监管要求。

Core service providers

We use vetted providers for hosting, analytics, support messaging, approximate locale detection, static font delivery, billing, SSO, and operational security.

Provider examples

AWS or other cloud infrastructure, PostHog EU analytics, Intercom support messaging, ipapi.co locale lookup, Google Fonts/static delivery, Stripe billing and payment processing where paid billing is used, and SSO providers such as Google, Microsoft, and GitHub when selected.

AI and model providers

OpenAI, Anthropic, or customer-configured/self-hosted Ollama-compatible endpoints may process prompts, outputs, and relevant context only to provide requested remediation workflows.

Customer-enabled integrations

Optional integrations include observability, logging, tracing, error monitoring, cloud logging, archives, event streams, source control, issue tracking, chat, notifications, and session-monitoring tools. Examples include Datadog, SigNoz, Grafana, New Relic, Sentry, Honeycomb, Splunk, Elastic, AWS, GCP, Azure, GitHub, GitLab, Bitbucket, Jira, Linear, Slack, Rollbar, Bugsnag, LogRocket, FullStory, Firebase Crashlytics, Instabug, and Embrace.

业务转让

我们可能会在保密的情况下共享与合并、收购或资产出售有关的数据。

EU-first processing

Prilog-controlled service data is hosted and processed in the European Union where available. Customer-enabled integrations, AI/model providers, and support or billing providers may process data in other regions based on your configuration or the provider's infrastructure.

Transfer safeguards

Where international transfers are required, we use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

保留期限

We retain account, usage, billing, support, and operational Customer Data for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.

Connected data and credentials

Integration tokens, credentials, and configuration are deleted or disabled when an integration is disconnected or when the account is terminated, subject to backup cycles and legal retention needs.

删除

Upon termination, we delete or return Customer Data according to the DPA, your settings, and your documented instructions.

保障措施

We maintain administrative, technical, and organizational measures including encryption in transit and at rest, monitoring, backups, incident response, vulnerability review, and secure development practices.

访问控制

Access to Customer Data is limited to authorized personnel on a need-to-know basis using role-based access, least privilege, audit logging, and secrets protection.

Shared responsibility

You are responsible for choosing integrations, limiting submitted data, protecting your own credentials, and reviewing generated fixes before deploying them.

GDPR 权利

您可以访问、更正、删除或限制处理您的个人数据。您也可以反对或要求可移植性。

撤回同意

如果同意是法律依据，您可以随时撤回同意。

监管机构

您可以向当地的数据保护机构提出投诉。

分析 and support

We use PostHog EU for analytics and Intercom for support messaging to understand usage, answer requests, and improve the service. We do not sell personal data.

Locale and fonts

We may use ipapi.co for approximate country or locale detection, browser storage for language preferences, and Google Fonts or static font delivery for page rendering.

Cookie 控制

您可以通过浏览器设置来控制 cookie。如果没有 cookie，某些功能可能无法运行。

本政策的更新

我们可能会更新此政策，并将在此处发布更新版本和新的生效日期。