Skip to content
Beaket
Sign in

Privacy Policy

Last updated: April 30, 2026

This Privacy Policy describes how Beaket ("we," "us," or "our") collects, uses, and shares information when you use our web application at beaket.com (the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

Information You Provide

When you create an account using Google OAuth, we receive:

  • Account information: Name, email address, and profile image URL
  • Third-party identifier: Google User ID
  • User-generated content: Specs, Briefs, ADRs, comments, and other content you create within the Service

We do not collect your Google password or access any Google data beyond basic profile information.

Information Collected Automatically

  • Session data: We store your user ID, email, name, and profile image in server-side sessions to keep you authenticated. Sessions expire 24 hours after your last access.
  • Cookies: We use a session cookie (lng) to store your language preference, and behavioral analytics cookies set by Microsoft Clarity (see "Behavioral analytics" below). We do not use advertising cookies and we do not sell your data.
  • Behavioral analytics: We use Microsoft Clarity to understand how users interact with the Service through session recordings, heatmaps, and click and scroll patterns, including frustration signals such as rage clicks. Form input fields and explicitly marked sensitive elements are masked by default. The captured data is transferred to and processed by Microsoft on its infrastructure (clarity.ms), primarily located in the United States. Beaket does not use this data for advertising. Microsoft's processing of the data is governed by the Microsoft Privacy Statement.
  • Log data: Our infrastructure may automatically collect IP addresses, browser type, and request timestamps for security and debugging purposes.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Authenticate your identity and manage your account
  • Send support responses when you contact us
  • Monitor and prevent security threats
  • Comply with legal obligations

We do not sell your personal information. We do not use your data for advertising.

3. How We Share Your Information

We share information only in the following circumstances:

  • Team members: Content you create (Specs, Briefs, ADRs, comments) is visible to members of your teams within the Service
  • Service providers: We use third-party services to operate the Service:
    • Cloudflare (infrastructure, hosting, DNS, CDN, and D1 database)
    • Google (OAuth authentication)
    • Microsoft (Microsoft Clarity for behavioral analytics — see Section 1)
    • Resend (transactional email for support requests)
  • Legal requirements: We may disclose information if required by law, regulation, or legal process

4. Data Storage and Security

Your data is stored on Cloudflare's global infrastructure using Cloudflare D1 (database), KV (key-value storage), and R2 (file storage). All data is encrypted in transit via TLS. We implement reasonable security measures to protect your information, but no method of transmission or storage is completely secure.

5. Data Retention

  • Account data: Retained as long as your account is active. We use soft deletion — deactivated data is marked inactive rather than permanently erased.
  • Session data: Automatically deleted 24 hours after last access.
  • Support requests: Retained for as long as necessary to resolve your inquiry and for our records.
  • Archived notifications: Automatically cleaned up after 30 days.

6. Your Rights

Depending on your location, you may have the following rights:

For EEA/UK residents (GDPR)

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Portability: Request your data in a portable format
  • Restriction: Request limitation of processing
  • Objection: Object to processing based on legitimate interests

For California residents (CCPA)

  • Right to know: Request disclosure of personal information collected
  • Right to delete: Request deletion of personal information
  • Right to opt-out: We do not sell personal information
  • Non-discrimination: We will not discriminate against you for exercising your rights

To exercise any of these rights, contact us at support@beaket.com.

7. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@beaket.com.

8. International Data Transfers

Your information may be processed on Cloudflare's globally distributed infrastructure and on Microsoft's infrastructure (primarily United States, for behavioral analytics via Microsoft Clarity). By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: support@beaket.com