Privacy policy

Who we are

Demuxer Consultoria em Tecnologia da Informação Ltda., CNPJ 66.436.339/0001-43, Rua Pais Leme, 215, suite 1713, Pinheiros, São Paulo, SP, 05424-150, Brazil, is the controller of the personal data handled under this policy, as defined by Brazil's General Data Protection Law (Law 13,709/2018, LGPD).

For anything about your data, write to support@demuxer.com.br.

What stays on your machine

The apps talk directly to your clusters, databases, brokers and APIs from your computer, without going through Demuxer's servers. Demuxer does not receive, store or see:

• the data you read or change through the apps;
• your connection settings, such as kubeconfig, MongoDB connections, client.properties and request collections;
• your credentials, which stay in the operating system's keychain.

Non-commercial use needs no account and sends no personal data to Demuxer.

Data we collect

• Demuxer account: name, e-mail and password, the latter stored only as a hash.
• Subscription and billing: plan, seats, invoices and billing details. Card details are received and stored by Stripe, never by Demuxer.
• Licenses: the identifier and name of each activated machine, to count the machines of each seat.
• Invitations: the e-mail of the people an organization owner invites.
• Access logs: IP address, date and time of each access to the account and the API.
• Updates: when checking for a new version, the app asks our server for the list of versions, which receives the IP address like any web server.

What we use it for

• To create and keep your account and deliver the plan you subscribed to, on the basis of performing the contract.
• To charge, issue invoices and meet tax and accounting obligations, on the basis of legal obligation.
• To send account e-mails, such as sign-up confirmation, password recovery, invitations and invoices, on the basis of performing the contract.
• To prevent fraud and abuse and keep the service secure, on the basis of legitimate interest.

We do not sell personal data and do not use it for advertising.

Who we share it with

Only with the providers needed to run the service, which handle the data on Demuxer's behalf:

• Stripe, to process payments;
• Resend, to send account e-mails;
• Google Cloud, to host the site, the API and the database.

Some of these providers handle data outside Brazil, under the safeguards of article 33 of the LGPD. We also share data when the law or a court order requires it.

Cookies and browser storage

The site uses no advertising cookies and no third-party tracking tools. The account area keeps in the browser only what it needs to keep you signed in.

How long we keep it

• Account data: while the account exists. When you ask for it to be closed, we delete the personal data, except what the law requires us to keep.
• Billing and tax data: for the period tax law requires, usually five years.
• Access logs: six months, as Brazil's Internet Civil Framework (Law 12,965/2014) requires.

Your rights

Under the LGPD you may ask for confirmation that we handle your data, access to it, its correction, anonymization, blocking or deletion, its portability, information on who we share it with, and the withdrawal of a consent.

Make your request at support@demuxer.com.br. We answer within 15 days. You may also complain to Brazil's National Data Protection Authority (ANPD).

Security

All traffic between the site, the apps and the API uses HTTPS. Passwords are stored only as hashes, the service's secrets are kept in a key vault and access to data is limited to those who need it to run the service. If a security incident may bring relevant risk or harm, we will tell you and the ANPD.

Changes to this policy

When this policy changes, we update the date at the top of this page. Relevant changes are announced by e-mail to people with a Demuxer account.