Privacy Policy

What we collect

Account data: your name, email address, and a hash of your password.

Provider credentials: the keys and IDs you add for your sandbox providers, encrypted at rest.

API keys: a hash of each key, its name, its limits, and when it was last used.

Usage data: for each sandbox, its provider, size, region, status, create attempts, times, and estimated cost, and the API key that created it.

Technical data: IP addresses, browser and client details, and request logs, which we use to run and secure the Service.

Sandbox contents

Commands, command output, and files you send to or read from a sandbox pass through the Service to your provider. We keep them only as long as needed to deliver them.

How we use it

We use this data to provide the Service, route and tear down sandboxes, show your dashboard, enforce key limits, measure provider health, keep the Service secure, fix errors, and contact you about your account and changes to the Service.

We do not sell your personal information or use it for advertising.

Who we share it with

Sandbox providers you connect (E2B, Daytona, Vercel, and Depot) receive your requests and credentials when you direct the Service to use them.

Service providers process data for us: Cloudflare (hosting and email), PlanetScale (database, in the United States), ClickHouse (usage records), PostHog (product analytics and error tracking), and Inngest (background jobs).

We may disclose data when the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of our business.

Cookies

We use a session cookie to keep you signed in and a cookie to remember your light or dark theme. We do not use advertising cookies.

Retention

We keep account data while your account exists. When you delete your account, we delete your provider credentials and API keys at once and delete or anonymize the rest within 30 days, except where the law requires us to keep it.

Your choices and rights

You can ask to see, correct, export, or delete your personal information by emailing team@sandcovery.com. Depending on where you live, you may have further rights under local law, and we will not treat you differently for using them.

Security

We protect data with encryption in transit and at rest, hashed keys and passwords, and access controls. No method of transmission or storage is fully secure.

Children

The Service is not for children under 18, and we do not knowingly collect their information.

Changes to this policy

We may update this policy. We will post the new policy on this page with a new effective date and, for a material change, tell account holders by email.

Contact

Starcovery LLC, 7345 W Sand Lake Rd Suite 210, Orlando, Florida 32819. Email: team@sandcovery.com.