Privacy Policy
At OctoLab, we take your privacy seriously. This Privacy Policy explains what data we collect, how we use it, and your rights when using our application.
Who we are
OctoLab is a web platform that allows developers to visually create and manage GitHub Actions workflows. You can reach us at hello@octolab.app.
What data we collect
We collect two types of data when you use OctoLab:
- Personal data: your email and user ID from GitHub or Google when you sign in.
- Technical and usage data: saved workflows and anonymous interaction events via Umami.
Cookies we use
We use essential cookies to enhance your experience and ensure application functionality:
| Cookie | Purpose | Duration |
|---|---|---|
| octolab_auth | Keeps your session active after signing in. | Session |
| octolab_hide_first_workflow_modal | Remembers if the first-workflow modal was shown. | Persistent |
| octolab_hide_beta_banner | Remembers if you dismissed the beta banner. | Persistent |
| octolab_skip_register_modal | Saves whether you’ve seen the register modal. | Persistent |
| octolab_cookie_consent | Saves whether you’ve accepted cookies. | Persistent |
We also use Umami Analytics to collect anonymous usage statistics. Some cookies may be placed by Umami’s embedded script.
How we use your data
- To authenticate your session and let you save workflows.
- To personalize your experience.
- To understand and improve how OctoLab is used.
- To respond if you contact us directly.
Legal basis (GDPR)
If you’re located in the European Union, we only process your personal data when we have a valid legal basis under the GDPR:
- Service use: to provide basic application features.
- Product improvement: anonymous analytics to improve OctoLab.
- Voluntary communications: only if you give explicit consent.
Our services are hosted by providers like Supabase, Vercel and Render, whose infrastructures may be located outside the EEA. In such cases, we ensure GDPR compliance through Standard Contractual Clauses (SCCs) or equivalent safeguards.
Who we share your data with
We don’t sell or rent your personal data. We only rely on essential third-party services:
- Supabase: user and workflow storage.
- Vercel and Render: application hosting.
- Umami Analytics: anonymous usage analytics.
Where your data is stored
Your data is stored on third-party servers either within or outside the EEA, always under GDPR-compliant safeguards such as SCCs.
Your rights
You have the right to:
- Access your personal data.
- Correct incorrect or outdated information.
- Delete your data and account.
- Object or request limitation of processing.
To exercise any of these rights, contact us at hello@octolab.app.
Policy updates
We may update this policy at any time. Major changes will be announced in the application or via email.
Contact
For any questions about this policy or how we manage your data, feel free to reach out at hello@octolab.app.