Privacy Policy

What We DON'T Collect

• No telemetry or analytics data
• No test execution data or results
• No API endpoints, headers, or request/response data
• No file contents or playbook configurations
• No environment variables or secrets
• No usage statistics or crash reports

How It Works

The CLI runs entirely on your local machine. All playbook files, test data, mock servers, and execution results stay on your computer. No internet connection is required for core functionality.

License Validation (Optional)

If you use a Pro or Business license, the CLI validates your license key locally using cryptographic signatures. License validation:

• Happens entirely offline using public key cryptography
• Does not phone home or send data to our servers
• Your license key is stored locally in your environment variables
• No license usage tracking or expiration checks over the network

What We DON'T Collect

• No file access logs or edit history
• No syntax highlighting or autocomplete usage data
• No extension activation or usage patterns
• No workspace or project information
• No code snippets or file contents

How It Works

The VSCode extension provides syntax highlighting, autocomplete, and inline execution features. All functionality operates locally within your VSCode environment. The extension communicates only with the Quadrastack CLI installed on your machine—no external servers involved.

Account Information

When you create an account to purchase licenses, we collect and store:

• Email address (for authentication and license delivery)
• Password (hashed and salted using industry-standard algorithms)
• Organization name (for license assignment)
• Payment information (processed securely by Stripe; we don't store credit card details)
• License purchases and activation history

Cookies and Tracking

• Essential Cookies: Session cookies for authentication (required for login)
• Analytics: Google Analytics to understand page visits and improve our documentation (anonymized)
• No Third-Party Tracking: We don't use advertising pixels, social media trackers, or cross-site tracking

Email Communication

We may send emails for:

• Account verification and password resets
• License purchase confirmations and delivery
• Important security or service updates

We do not send marketing emails or sell your email address to third parties.

Where We Store Data

• Website account data: database hosted on secure servers
• Payment processing: Handled by Stripe (PCI DSS compliant)

Security Measures

• All website connections use HTTPS/TLS encryption
• Passwords are hashed
• License keys are cryptographically signed

Data Retention

• Account data: Retained while your account is active
• License purchase history: Retained for accounting and support purposes