Privacy Policy

This Privacy Policy explains how Adios Global LLC, a Wyoming limited liability company doing business as Adios.dev ("Adios," "Adios.dev," "we," "us," or "our"), collects, uses, discloses, stores, and protects personal data in connection with our website, platform, APIs, CLI tools, hosted runtimes, workspaces, deployments, support, marketing, and related services (collectively, the "Services").

This Policy should be read together with our Terms of Service. If you use the Services on behalf of a company or team, this Policy applies to personal data processed in connection with that account or team workspace.

Adios Global LLC is the controller for account administration, billing, security, communications, and our own website and product analytics. When a customer uses Adios to host or process other people's personal data under their instructions, that customer determines the purposes of that processing. Requests concerning a customer's deployed application should be directed to that customer.

1. Information We Collect

We may collect the following categories of information:

Account and identity information, such as name, email address, optional company name and website, role, team membership, login identifiers, authentication status, and profile information from connected identity providers.
Age eligibility and approval information: your birthday is processed during signup to determine your age. We retain your age at signup, the date it was recorded, and your age group rather than the full birthday. We also collect the applicant's email address, a parent or legal guardian's email address for applicants aged 13–17, approval or refusal, timestamps, and the version of the Terms accepted. Approval links are time-limited and single use.
Billing and commercial information, such as plan selection, subscription status, invoices, payment status, billing contact details, tax information, and payment metadata. Payment card details are processed by our payment processors.
Platform and workspace data, such as repositories, source-control metadata, source code, prompts, configuration files, environment variables, secrets, build files, deployment artifacts, runtime logs, outputs, domains, workload metadata, database metadata, and workflow activity that you submit to or generate through the Services.
Usage, device, and diagnostics information, such as IP address, device and browser metadata, pages viewed, referrer URL, session events, clicked links, feature usage, performance data, error reports, security events, cookie identifiers, local storage data, and similar telemetry.
Marketing and attribution information, such as UTM parameters, gclid, fbclid, li_fat_id, campaign source, campaign medium, campaign content, conversion events, and other advertising or analytics identifiers.
Support and communications information, such as messages you send us, support tickets, feedback, survey responses, bug reports, sales conversations, and related contact history.

2. Sources of Information

We collect information directly from you, from your use of the Services, from your browser or device, from cookies and similar technologies, from team members who invite or administer you, and from third-party services you connect or interact with. Those third parties may include source-code providers, identity providers, payment processors, analytics providers, advertising platforms, communication tools, customer support tools, infrastructure providers, and AI model providers.

3. Customer Content and Proprietary Code

We process source code, prompts, repository data, configuration files, secrets, logs, build artifacts, deployment metadata, and other Customer Content only as needed to provide, secure, operate, support, troubleshoot, and improve the Services; to follow your instructions; and to comply with law.

We do not sell Customer Content. We do not use Customer Content to train third-party foundation models unless you expressly enable or request that functionality. We may disclose Customer Content to service providers and subprocessors under confidentiality obligations as needed to provide, secure, support, or improve the Services, or when required by valid legal process.

4. How We Use Information

We use information for the following purposes:

to provide, operate, maintain, and improve the Services;
to authenticate users and manage accounts, teams, and access;
to build, deploy, run, monitor, route, secure, and troubleshoot applications and workloads;
to process payments, manage subscriptions, enforce resource limits, and maintain billing records;
to provide support, respond to requests, send service messages, and communicate about the Services;
to detect, prevent, investigate, and respond to fraud, abuse, security incidents, policy violations, and unlawful activity;
to analyze performance, reliability, product usage, campaign attribution, and conversion activity;
to advertise, measure, and improve our marketing, including through Google Ads and other advertising and analytics platforms;
to comply with legal obligations, enforce our Terms, resolve disputes, and protect rights, users, and the platform.

5. Legal Bases

Where the GDPR or UK GDPR applies, we use the following bases for our processing. We process account, workspace, and service data to perform our contract with you or take requested steps before a contract. We keep required tax, invoice, and other statutory records to comply with legal obligations. Our legitimate interests support proportionate security, abuse prevention, service reliability, support, and the establishment or defence of legal claims.

Optional browser analytics and advertising measurement in the EU, EEA, and UK rely on your consent. Acceptance of the Terms, parental account approval, and signing in do not provide this consent. You may withdraw it at any time through Cookie settings. Withdrawal does not affect processing lawfully carried out before withdrawal. Where prior consent is not required, limited product measurement may rely on our legitimate interest in understanding and improving the Services, subject to your available opt-out and objection rights.

6. Cookies and Analytics

Essential cookies and similar storage support sign-in, sessions, fraud prevention, and your saved privacy choices. We also keep necessary operational records, including access and security logs, usage metering, and billing records. These functions continue when optional tracking is rejected.

We use PostHog for product analytics and Google Analytics, delivered through Google Tag Manager, for website measurement. When enabled, these tools measure visits, page paths, feature use, signup and login events, campaign attribution, and conversions. Data may include cookie or device identifiers, browser information, IP address, campaign parameters, and pseudonymous account or team identifiers. Our current browser integration disables session replay, automatic form and click capture, and automatic exception capture. We avoid sending names, email addresses, passwords, source code, and private account-action URLs as browser analytics properties.

For visitors identified as being in the EU, Iceland, Liechtenstein, Norway, or the UK, optional analytics and advertising tags stay off until permission is given. The banner offers Accept optional, Reject optional, and Settings. Analytics and advertising measurement can be chosen separately. If location cannot be determined, optional tracking stays off. Outside these locations, limited analytics may start by default; advertising measurement requires a separate choice. Cookie settings remains available to everyone.

To choose the appropriate regional controls, we look up the connection's IP address against a local country database. This lookup does not send your IP address to a geolocation provider. Location estimates can be imperfect, including when a VPN or proxy is used.

Advertising measurement may use Google Ads or other configured campaign tags and click identifiers such as gclid, fbclid, and li_fat_id. We keep ad personalization disabled in our Google consent configuration. We do not treat optional advertising as necessary for access to Adios. Depending on the applicable law and a provider's use of the data, advertising disclosures can constitute sale, sharing, or targeted advertising even without a payment for the information.

Your browser choice is stored in the essential adios_privacy cookie for up to six months and shared across our adios.dev subdomains. Use Cookie settings to change or withdraw it. Signed-in account preferences also control optional, user-associated API analytics; a recorded refusal takes priority. Known under-18 accounts have optional product analytics and advertising disabled. Refusing optional tracking does not prevent signup, login, or normal use.

Learn more about the providers' processing in the PostHog Privacy Policy and Google Privacy Policy. Browser and device controls are additional options, but they do not replace Adios's Cookie settings.

We may disclose information to service providers and subprocessors that help us provide the Services, including hosting and infrastructure vendors, storage providers, database providers, payment processors, identity and authentication providers, source-code providers, AI model providers, analytics providers, advertising and measurement platforms, customer support tools, communications tools, security vendors, professional advisers, and other vendors that process information on our behalf.

We may also disclose information to comply with law or valid legal process, enforce our Terms, prevent abuse, protect the rights and safety of users or third parties, respond to security incidents, or support a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction.

8. Security and Abuse Prevention

We use administrative, technical, and organizational safeguards designed to protect information and the platform, including access controls, secrets handling, logging, monitoring, encryption where appropriate, and security tooling. No system is perfectly secure, and we cannot guarantee absolute security.

9. Data Retention

We retain information for as long as reasonably necessary to provide the Services, maintain business and security records, process payments, comply with law, resolve disputes, enforce agreements, prevent abuse, and protect the platform. Retention periods vary by data type, account status, plan, configuration, operational need, and legal requirements.

Account records, billing records, security logs, support tickets, backups, deployment artifacts, runtime logs, and deleted-account data may be retained for different periods. Some information may remain in backups or audit logs for a limited period after deletion from active systems.

Pending account and parental approval requests expire after 48 hours. Expired applications that did not create an account are removed during subsequent registration cleanup. Accepted age eligibility and parental approval evidence is retained with the account as needed to demonstrate authorization and handle legal claims. Analytics retention depends on the configured provider retention period and the purposes above. Contact us for details or deletion.

10. International Processing

We are based in the United States. Information may be processed, stored, and transferred in the United States and other countries where we or our service providers operate. Those locations may have privacy laws that differ from those in your jurisdiction. Where required, transfers must be covered by an applicable adequacy decision or appropriate contractual safeguards, such as the European Commission's standard contractual clauses and, for UK transfers, the applicable UK addendum or international data transfer agreement. Contact privacy@adios.dev for information about the safeguards applicable to your data or to request a copy.

11. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or port certain personal data; to opt out of sale, sharing, targeted advertising, or certain profiling; to limit certain uses of sensitive personal information; to withdraw consent where processing is based on consent; to appeal a decision; or to lodge a complaint with a supervisory authority.

You can exercise privacy rights by contacting privacy@adios.dev. We may need to verify your identity, authority, account ownership, or request details before acting. Authorized agents may submit requests where permitted by applicable law. We will not discriminate against you for exercising privacy rights, but some choices may affect the availability or functionality of the Services.

To manage advertising and non-essential cookie choices, use our Cookie settings control on our site, your browser controls, device controls, or the controls provided by the relevant advertising platform. Where required by applicable law and supported by our systems or consent tools, we will process recognized opt-out preference signals for the browser or device sending the signal.

12. Age Eligibility and Parental Approval

People under 13 may not create or use an Adios account. Signup starts with an email address, a password, and human verification, then asks for your name and birthday, with optional company and website fields, before an account is created. If the birthday indicates an age under 13, registration stops and the browser clears the entered details. We do not store the password or full birthday in an incomplete registration record. If we learn that an account belongs to someone under 13, we will restrict it and take steps to delete the associated personal data, subject to legal requirements. Contact privacy@adios.dev to report such an account.

People aged 13–17 can register only after a parent or legal guardian verifies an email address, confirms their authority and adult status, accepts the Terms, and approves the account. We collect the emails, age at signup and its recorded date, age group, approval decision, timestamp, and Terms version to administer that process. Names and any company or website you provide are retained with the pending request and linked to your account when registration completes. These fields are private profile details; they do not create a company account. Email verification establishes control of an address rather than independently proving parenthood or identity; further checks may be needed under local law or in higher-risk cases.

Parental account approval does not authorize optional tracking. We disable optional product analytics and advertising for known under-18 accounts. A parent or legal guardian may contact privacy@adios.dev to ask about the account, exercise applicable rights, or withdraw authorization. We may verify their authority before acting and restrict the account during review.

13. Third-Party Services

The Services may link to or integrate with third-party services, including source-code providers, identity providers, payment processors, analytics platforms, advertising platforms, AI model providers, and infrastructure providers. Those third parties operate under their own terms and privacy policies, and we are not responsible for their practices.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions become effective when posted, unless a later effective date is stated. If we make material changes, we may provide additional notice through the Services or other reasonable means.

Contact

Questions or privacy requests may be sent to privacy@adios.dev.