PRIVACY POLICY
Last updated: February 24, 2026
SUMMARY
DatumPilot is operated by Ingenivue Engineering Services Inc. We use required cookies and storage for core functionality. PostHog analytics are disabled by default and only activate after explicit opt-in.
DATA WE COLLECT
- Account information (email, authentication identifiers).
- Product usage analytics only after opt-in, and reliability telemetry based on our configured monitoring controls.
- User-generated content (collections, FCFs, exports).
- Billing metadata (plan, status) stored in our systems.
PAYMENTS
Payments are processed by Stripe. We do not store full payment card numbers or sensitive payment details. Stripe processes payment information according to its own privacy practices.
HOW WE USE DATA
- Provide and secure the Service (authentication, authorization).
- Operate billing and subscriptions.
- Measure performance and improve features only when analytics consent is granted.
- Respond to support requests.
SERVICE PROVIDERS
We use third-party providers to operate the Service:
- Neon (database)
- Cloudflare R2 (file storage)
- Stripe (payments and billing)
- PostHog (analytics, only after explicit opt-in)
- Sentry (error monitoring and diagnostics)
COOKIE PREFERENCES
Analytics remain off until you select "Accept analytics" in the consent banner. You can change this later using any "Manage cookie preferences" link in the app or marketing pages.
If you withdraw consent, new PostHog analytics events stop immediately in this browser session.
DATA RETENTION
- Account and authentication data: while your account is active; deleted from primary systems within 30 days of a verified deletion request unless legal hold applies.
- User-created engineering content (collections, FCFs, stackups, exports metadata): while your account is active; deleted within 30 days of a verified deletion request unless legal hold applies.
- Draft records: 60 days of inactivity.
- Archived records: 30 days after archive.
- PostHog analytics events (only after opt-in): 90 days.
- Sentry error events: 90 days.
- Application logs: 30 days.
- Billing and tax records: 7 years.
Backup/history retention for deleted records is limited to the current disaster-recovery window (currently up to 6 hours).
DATA SUBJECT REQUESTS (DSAR)
To request access, correction, export, restriction, objection, or deletion of your data, email support@datumpilot.com from your account email with the subject line "Privacy request."
We acknowledge requests within 2 business days, verify identity before fulfillment, and complete responses within 30 calendar days. If a request is complex, we may extend by up to an additional 30 days with written notice.
Deletion requests require an explicit confirmation step before destructive processing.
CONTACT
Questions about privacy can be directed to support@datumpilot.com.