Legal

Privacy Policy

Last updated: December 2025

Information we collect

We collect information you provide when creating an account (name, email address), information generated through your use of the platform (runbooks, incidents, settings), and standard usage data (page views, feature usage) to improve the product.

How we use your information

We use your information to provide and improve the ShieldSet service, send transactional emails (account notifications, trial reminders), process payments through Stripe, and respond to support requests. We do not sell your data to third parties.

Data storage

Your data is stored in Supabase (PostgreSQL) hosted in the US. Runbooks and incident data you create are associated with your account and are not shared with other users unless you explicitly make a runbook public.

Third-party services

We use Clerk for authentication, Stripe for payment processing, Resend for transactional email, and Anthropic's API to generate runbook content. Each of these services has its own privacy policy governing their handling of data.

Data retention

We retain your data for as long as your account is active. If you delete your account, your data is removed from our systems within 30 days. Exported runbooks you've downloaded remain on your systems under your control.

Your rights

You can export your runbooks at any time in Markdown format from your dashboard. You can delete your account from your settings page. To request a full data export or deletion, contact us at team@shieldset.com.

Contact

For privacy-related questions, contact us at team@shieldset.com.