Privacy Policy
Last updated: March 2026
Information we collect
We collect the account information Google provides when you sign in — your name, email address, and account identifier. We never receive or store your Google password; authentication happens entirely on Google's side.
How we use it
Account information is used to operate your account: authentication, organization membership, audit trail attribution, and product communications you've opted into. We do not sell personal information to third parties.
Secret values
Environment variable values you store are encrypted at rest and are never used for any purpose other than serving them back to authorized members of your organization. See our Trust Center for the technical detail.
Data retention
Account and secret data is retained for as long as your account is active. Deleting an organization permanently removes its projects, environments, and secrets; an audit trail of the deletion itself is retained for forensic purposes.
Your rights
You can update or delete your account information at any time from Settings. To request a full data export or deletion beyond what's self-service, contact privacy@envsync.io.
Changes to this policy
We'll update the date at the top of this page whenever this policy changes materially.