Política de privacidade

Who we are

NurseAndrea is operated by Ago AI LLC ("Ago AI", "we", "us", "our"). We provide a SaaS observability platform helping software teams monitor their applications. You can contact us at privacy@nurseandrea.io.

What data we collect

We collect information you provide directly: email address, name, and company name when you create an account. We collect application telemetry your systems send to NurseAndrea: log entries, metrics, distributed traces, and error events. We collect usage data (pages visited, features used, session duration) to improve the product. Payment information is processed via Stripe — we never store card details. We collect technical data such as IP address and browser type for security purposes.

How we use your data

We use your data to provide and operate the NurseAndrea service, send product and account communications via Postmark, manage feature access via LaunchDarkly, send notifications via Knock, process payments via Stripe, improve the product based on usage patterns, and comply with legal obligations. We do not sell your data to third parties. We do not use your application log data to train AI models without explicit consent.

Legal bases for processing (GDPR)

Performance of a contract (Art. 6(1)(b)) — processing your account and billing information to deliver the service.

Legitimate interests (Art. 6(1)(f)) — product analytics, fraud prevention, and security monitoring.

Consent (Art. 6(1)(a)) — marketing communications, withdrawable at any time.

Legal obligation (Art. 6(1)(c)) — compliance with applicable laws.

Your application data — you own it

Log data, metrics, traces, and other telemetry you send to NurseAndrea remains your property. You are the data controller; Ago AI acts as data processor on your behalf. We process it solely to provide the service. Our Data Processing Agreement (DPA) is available on request at privacy@nurseandrea.io.

Data retention

Raw application telemetry — including log entries, metrics, distributed traces, and component measurements — is pruned on a rolling 30-day schedule. Aggregated telemetry rollups are retained to support longer-range reporting. Account and billing information is retained for the duration of your subscription and 7 years thereafter for legal compliance. You may request deletion at any time — see our Data Deletion page.

Third-party processors

Railway (Render Operations Inc.) — cloud hosting Postmark (Wildbit LLC) — transactional email Knock (Knock Labs Inc.) — notification orchestration LaunchDarkly — feature flag management Stripe Inc. — payment processing Sentry — error monitoring (anonymised)

All sub-processors are contractually bound to process data only as instructed.

Cookies

We use a session cookie (httponly, secure) for authentication. We use localStorage to store your theme preference. We do not use advertising or third-party tracking cookies.

Your rights (GDPR)

Access, Rectification, Erasure, Restriction of processing, Data portability, Objection to processing, and Withdrawal of consent. Email privacy@nurseandrea.io to exercise any of these rights. We respond within 30 days.

Changes

We may update this policy periodically. We will notify you of material changes via email at least 14 days before they take effect.

Contact

privacy@nurseandrea.io Ago AI LLC, London, United Kingdom