Your data, and what we do with it.

Patchwick is the data controller for the personal data described here. Questions or requests go to hello@patchwick.com, and we answer within one month.

What we keep and why

• Your email, name and password. To run your account. The password is stored only as a secure hash that we cannot reverse.
• Your company name, if you give it. Shown on your dashboard and invoices.
• For engineers, your GitHub username and application. To review your account and give you access to the repositories you are assigned to.
• Your projects and the notes engineers write on them. This is the service you asked for.
• Invoices. Kept for six years because UK tax law requires it.
• A record of who accessed or changed what. To keep client code secure. Kept for two years.

We do not collect your date of birth, home address or phone number, and we do not track you across other sites. Card payments are handled by our payment provider and card details never reach us.

Our legal reasons

Most of this is needed to provide the service you signed up for (contract). Invoices are kept to meet a legal obligation. Security records are kept in our legitimate interest in protecting client code. Marketing emails are sent only if you tick the box, and you can turn them off at any time.

Cookies

We use one cookie, which keeps you signed in. It is strictly necessary, so we do not ask for consent. There are no analytics or advertising cookies.

If you use the light bulb button to pick light or dark mode, your browser remembers that choice on your device. It is only the word "light" or "dark", it never leaves your browser, and you can clear it by clearing site data. If you never press the button, nothing is saved and the site follows your system setting.

Where it is stored and who else sees it

• Our database is hosted by Neon in London, encrypted at rest and in transit.
• GitHub holds project code and engineers' usernames, under the UK–US data bridge.
• An email provider sends account and project emails for us.

Each of these works under a data processing agreement. We never sell your data.

How long we keep it

Your account data is kept while you have an account. If you delete your account, you have 30 days to change your mind, and then your details are erased. Backups roll over within a further 30 days. Applications from engineers who are not approved are deleted after six months.

Your rights

You can download a copy of your data, correct it, or delete your account from your account settings. You can also ask us to restrict or stop using your data, or object to how we use it. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.