Privacy Policy

Introduction

Background Craft LLC ("Hydrant", "we", "us", or "our") operates the Hydrant platform at hydrant.dev. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our services.

By using Hydrant, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the service.

Information We Collect

Information you provide directly

• Account information — name, email address, and password when you register.
• Workspace content — issues, notes, decisions, and other content you create inside Hydrant.
• Communications — messages, support requests, and other information you send to us.

Information collected automatically

• Usage data — pages visited, features used, actions taken, and session timestamps.
• Device data — browser type, operating system, IP address, and referrer URL.
• Cookies and similar technologies — session tokens and preference cookies required to operate the product.

Information from third parties

• Authentication providers — if you sign in through WorkOS AuthKit or an enabled OAuth provider such as GitHub, we receive basic profile details such as your name, email address, and provider identifier.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Hydrant platform.
• Authenticate users and protect account security.
• Send transactional emails, including account verification and password reset messages.
• Respond to support requests.
• Comply with legal obligations.
• Analyze aggregate usage to guide product development.

We do not sell your personal information.

Third-Party Services

Hydrant currently relies on the following sub-processors to operate:

Service	Purpose	Privacy policy
WorkOS	Authentication and identity flows via WorkOS AuthKit	workos.com/privacy
Convex	Database and backend infrastructure	convex.dev/privacy
Resend	Transactional email delivery	resend.com/privacy
GitHub	OAuth sign-in	github.com/site/privacy

We may update this list as our infrastructure changes.

Data Retention

We retain account data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where a longer retention period is required by law.

Workspace content you delete is removed from our systems within 30 days of deletion.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and associated data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to certain processing activities.

To exercise any of these rights, contact us at privacy@hydrant.dev. We will respond within 30 days.

Security

We use reasonable technical and organizational measures to protect your data. However, no method of transmission over the internet or electronic storage is completely secure. We encourage you to use a strong, unique password and to report suspected security issues to security@hydrant.dev.

Children's Privacy

Hydrant is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or our data practices, please contact us:

Background Craft LLC
5900 Balcones Drive Ste 100, Austin, TX 78731
privacy@hydrant.dev