Privacy Policy

1. Data controller

Envly is the controller of personal data described in this policy. Contact: info@envly.dev. The registered office, tax and company registration details are the visible placeholders above and must be completed before publication as final legal information.

2. Data we collect

• Account data: email address, username, optional name and surname, account status and securely protected authentication credentials.
• Google OAuth data: when you choose Google sign-in, the Google account identifier, email and basic profile information Google makes available for the requested email and profile scopes.
• Service content: project names, environment variables, environments, roles, memberships and project invitations, including invitee email addresses.
• Billing data: selected plan, Stripe customer and subscription identifiers, subscription status and related billing metadata. Envly does not store full payment-card details.
• Communications: information contained in account verification, password recovery, invitation and support communications.
• Technical data: authentication and session information and ordinary server security records generated when you access the service.
• Analytics data: when you consent to statistics cookies, Google Analytics may collect page visits, interaction events, approximate location, referring pages, browser and device information and online identifiers associated with its analytics cookies.

3. How we use data

We use personal data to:

• create, authenticate and maintain accounts;
• provide projects, environment variables, memberships and invitations;
• send transactional emails and respond to support requests;
• process subscriptions and enforce plan limits;
• with your consent, measure website usage and improve Envly through analytics;
• protect Envly, prevent abuse and troubleshoot failures; and
• comply with legal obligations and enforce our terms.

4. Legal bases

Where data-protection law requires a legal basis, we rely on performance of our contract to provide Envly, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where it is specifically requested. Google Analytics is used on the basis of your consent to statistics cookies. You may withdraw consent at any time without affecting earlier lawful processing.

5. Service providers and recipients

We disclose data only as needed to operate Envly, comply with law, protect rights or complete a corporate transaction. Relevant providers include Stripe for subscription payments, Google for OAuth and Google Analytics, Cookiebot for consent management, email delivery infrastructure for transactional messages, and hosting, database and security providers. Team members can see information made available within projects according to their roles. You can read Google’s Privacy Policy for more information about its processing.

6. International transfers

Some providers may process data outside your country. Where required, we use an applicable transfer mechanism and safeguards recognized by data-protection law. Contact us for information relevant to your account and jurisdiction.

7. Retention

We retain account and service data while your account is active and as reasonably necessary to provide Envly. We may retain limited records afterward to meet legal, accounting, security and dispute-resolution requirements. Retention periods vary with the type of data and applicable obligations. Account deletion may not remove data that must lawfully be retained or that remains in time-limited backups. Analytics retention is governed by the settings of our Google Analytics property. The default lifetimes of analytics cookies are described in the Cookie Policy and may be shortened by browser restrictions or our configuration.

8. Security

We use organizational and technical measures designed to protect personal data, including access controls and protected authentication. No online service can guarantee absolute security, so you should also use strong credentials and limit access to sensitive project data.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, and to receive portable data. You may also have the right to complain to a competent supervisory authority. To make a request, email info@envly.dev. We may need to verify your identity before acting on it.

10. Cookies

Envly uses cookies necessary for authentication, sessions, security and consent management. With your consent, Envly also uses Google Analytics cookies to measure website usage and improve the service. You may refuse or withdraw consent to analytics cookies without losing access to Envly. Read the Cookie Policy for details.

11. Children

Envly is not directed to children who cannot lawfully consent to the processing of their data. If you believe a child has provided personal data improperly, contact us so we can investigate.

12. Changes and contact

We may revise this policy as Envly or legal requirements change. We will update the date above and provide additional notice when appropriate. Questions and privacy requests can be sent to info@envly.dev.