Privacy Policy

“Mochi Deploy,” “we,” and “us” refer to the operator of the service: the person or entity that provides it, together with its owners, operators, and agents. By using the service, you acknowledge that your information will be handled as described in this Privacy Policy.

Information we collect

• Account information — your name, email address, organization, and sign-in details, handled through our authentication provider.
• Environment details — the credentials and addresses you provide so Mochi Deploy can reach your Aprimo environments at your direction.
• Configuration data — the Aprimo configuration and change history we read, compare, and promote to deliver the service.
• Usage data — logs and basic analytics used to operate, secure, and improve the service.
• Activity records — a record of significant actions taken in a workspace: who connected an instance, who approved a change, when a change reached an environment, and whether an action came from a person, an API key, or an AI agent acting for someone.
• AI client access tokens — when you connect an AI client, the access tokens that let it act for you.

How we use information

We use this information to run the service, connect to your Aprimo environments when you ask us to, provide support, keep the service secure, and meet our legal obligations.

Your data is yours

Your configuration and connection data belong to you. We access it to provide, maintain, secure, troubleshoot, improve, and support the service. We do not sell it, and we do not use your configuration content to train AI models. You can disconnect an Aprimo instance or delete your account at any time.

Cookies

We use cookies and similar technologies necessary to operate the service, keep you signed in, and, where applicable, understand how the service is used.

AI access

AI access is optional and off until an administrator turns it on. The AI client you connect is one you choose; we don't provide it.

Whatever that client reads from Mochi Deploy, including your Aprimo configuration, goes to it and to the AI provider behind it. What happens to it from there is governed by that provider's terms and privacy policy, not ours, including whether it is retained or used for training. We don't choose that provider and can't control what it does with what it receives.

We don't send your configuration to an AI provider ourselves, and we don't use your data to train AI models.

Service providers

We rely on a small number of providers to run Mochi Deploy — hosting, sign-in, key management, error monitoring, and email — and share information with them only as needed to operate the service. Each is named on our sub-processor list, along with what it does and what it handles. We may also disclose information if required by law.

Retention

We keep information while your account is active and for as long as we need it to provide the service or meet legal obligations.

When an organization is deleted, access is revoked straight away. Its data is held for a short recovery period so an accidental deletion can be undone, and is removed after that. Access tokens for connected AI clients expire and are cleared.

After deletion, information may remain in encrypted backups for a limited period until those backups expire.

Business transfers

If Mochi Deploy or its assets are acquired, merged, or transferred, your information may be transferred as part of that transaction.

Where your information is handled

We and our providers may store and process information in countries other than the one you live in, including the United States.

Your choices

You can access or delete your personal information by contacting us at the address below, and we'll respond within a reasonable time.

Security

We use commercially reasonable measures to protect your information, including encrypting connection credentials and access tokens when stored, but no online service can guarantee absolute security.

Children

Mochi Deploy is a tool for professionals and isn't directed to children. We don't knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy from time to time. If we make a material change, we'll update the date above.

Contact

Questions about this policy or your data? Email us at [email protected].