Privacy Policy

Last updated: February 26, 2026

1. Introduction

Grizzly Peak Software LLC ("we," "us," or "our") operates MermAgent ("the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

2. Information We Collect

Account Information

When you sign in using Google or GitHub, we receive your name, email address, and profile picture from the authentication provider. We do not receive or store your password.

User Content

We store the diagrams, chat messages, and version history you create while using the Service. This content is associated with your account and is necessary to provide the Service.

Usage Data

We use Google Analytics to collect anonymous usage data, including pages visited, session duration, and general device/browser information. This data is used to improve the Service and is processed by Google in accordance with their privacy policy.

Session Data

We store session tokens in our database to maintain your authentication state. These are automatically managed and expire after a period of inactivity.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Store and display your diagrams and chat history
• Process your requests through third-party AI services
• Analyze usage patterns to improve the Service
• Communicate with you about the Service

4. Third-Party Services

We use the following third-party services:

• OpenAI — Your chat messages and diagram context are sent to OpenAI's API to generate AI responses. Please review OpenAI's privacy policy.
• Google OAuth — Used for authentication. Google receives information about your sign-in activity.
• GitHub OAuth — Used for authentication. GitHub receives information about your sign-in activity.
• Google Analytics — Used for anonymous usage tracking. You can opt out using browser extensions or settings.
• DigitalOcean — Our hosting and database provider. Your data is stored on DigitalOcean infrastructure.

5. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on DigitalOcean. We use encrypted connections (SSL/TLS) for data in transit. While we implement reasonable security measures, no method of transmission or storage is 100% secure.

6. Data Retention

We retain your account information and User Content for as long as your account is active. If you delete a board, its associated messages, diagrams, and version history are permanently deleted. If you wish to delete your entire account, please contact us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request a copy of your data in a portable format

To exercise any of these rights, please contact us at grizzlypeaksoftware.com.

8. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly.

9. Cookies

We use session cookies to maintain your authentication state. Google Analytics may also set cookies for usage tracking. You can configure your browser to reject cookies, but this may affect your ability to use the Service.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy, please contact us at grizzlypeaksoftware.com.