Privacy Policy

1. Who we are

This service is operated by SOFT FOR YOU SL, with CIF B60179108, registered at Avinguda Meridiana 27, 08018 Barcelona, Spain. The service is available at monitor.iria.tech.

For data protection inquiries, contact our Data Protection Officer at hello@iria.tech.

2. What data we collect

We collect the following categories of personal data:

• Account data — name, email address, company name
• Git metadata — repository names, branch names, commit hashes, author emails, line counts, AI attribution notes. We do not collect or store your source code.
• Usage analytics — AI agent usage, token counts, cost estimates, durability metrics
• Technical data — IP address, browser user agent, session identifiers

3. Purpose and legal basis

We process your data for the following purposes under GDPR Article 6:

• Service delivery (Art. 6.1.b — contractual necessity) — providing the AI code observability dashboard, team analytics, and reports
• Billing (Art. 6.1.b) — processing payments and managing subscriptions
• Security and fraud prevention (Art. 6.1.f — legitimate interest) — audit logs, access control
• Communication (Art. 6.1.b) — responding to support requests and sending service notifications

4. Data sharing

We do not sell, rent, or share your personal data with third parties for their own purposes. We may disclose data only when:

• Required by law, regulation, or court order
• Necessary to protect our legal rights or the safety of our users
• With service providers who process data on our behalf under a Data Processing Agreement (e.g., cloud hosting)

5. Data retention

We retain your personal data for as long as your account is active. Upon account deletion, we remove your data within 30 days. Anonymized, aggregated analytics may be retained indefinitely as they do not constitute personal data.

6. Your rights

Under GDPR Articles 13 through 20, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email hello@iria.tech. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. International transfers

Your data is stored in the European Union (Google Cloud, Belgium region). We do not transfer personal data outside the EEA unless adequate safeguards are in place as required by GDPR Chapter V.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and audit logging.

9. Cookies

We use strictly necessary cookies to operate this service. For details, see our Cookie Policy.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the service. Continued use after changes constitutes acceptance.