We collect only what's needed to sell you a product and keep it working. We do not sell or share your personal information — including as defined under CCPA/CPRA. We don't run analytics tools that profile you. You can delete your data at any time by emailing us.
Septim Labs (a Michigan-based sole proprietorship operated by Ethan Quintero, [email protected]) is the data controller for personal information collected through this site and its products. If you are located in the EU or UK, Septim Labs is your point of contact for GDPR-related requests; we do not have a formal EU representative appointed at this time. Contact: [email protected].
For visitors in the EU and UK, we process personal data under the following lawful bases:
We do not process personal data for automated decision-making or profiling.
When you buy:
We do NOT receive your full credit card number — Stripe handles that.
When you fill a confirmation form:
When you visit our sites:
For Septim Sift and Septim Deploy specifically: if you grant Septim Labs access to a private GitHub repository as part of the engagement, the repository contents are read by the Septim Labs team (not by any third party). We do not commit, modify, or distribute your code. Access is revoked at the end of the engagement.
That's the complete list. No ad networks, no analytics firms, no data brokers.
Purchase records live in Stripe for accounting/refund purposes (typically 7 years per US tax requirements). Everything else — confirmation form submissions in our inbox, repository collaborator lists — is retained as long as you're a customer. If you request account deletion, we remove what we control within 30 days, though Stripe retains transaction records for compliance.
You can at any time:
California residents (CCPA/CPRA): We do not sell or share your personal information as defined under California law. You have the right to know what we collect, request deletion, and opt out of sharing. Email us to make any of those requests. We will respond within 45 days.
EU/UK residents (GDPR): You have rights under Articles 15–22 — access, rectification, erasure, restriction, portability, and objection. Email us to exercise any of them. You also have the right to lodge a complaint with your local supervisory authority.
We do not set any first-party tracking or analytics cookies. Cloudflare, our hosting and DNS provider, sets technical cookies (__cf_bm, cf_clearance) for bot protection and routing. These are functional — not advertising — and are governed by Cloudflare's privacy policy. No marketing or behavioral cookies are present on this site.
We take reasonable steps (encrypted transport, signed webhooks, no plaintext secrets, per-user license isolation) but no system is perfectly secure. If we become aware of a breach that creates high risk to your rights or freedoms, we will notify affected users without undue delay. Where required by law (e.g., GDPR Article 33), we will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.
Our products are for developers and business operators. We don't knowingly collect data from anyone under 16.
Questions about this policy, your data, or to make a request: [email protected].