2. Data We Collect
We collect the following data when you use JavaPerf:
- Account data: email address, name, and authentication data via Clerk.
- Usage data: analysis history, credit balance, timestamps of analyses performed.
- Code submitted for analysis: source code uploaded as ZIP or fetched from a public repository URL. This data is processed to generate the analysis report and is not stored beyond the analysis session unless explicitly saved by the user in their dashboard.
- Payment data: payment transactions are processed by our payment provider (Paddle). We do not store credit card details.
- Technical data: IP address, browser type, and usage logs for security and performance purposes.
3. How We Use Your Data
- To provide and operate the JavaPerf platform
- To manage your account and credit balance
- To process payments and issue invoices
- To respond to support requests
- To improve the platform (anonymized usage analytics via Google Analytics)
- To comply with legal obligations
4. Legal Basis for Processing (GDPR)
For users in the European Union, we process your data on the following legal bases:
- Contract performance: to provide the service you signed up for
- Legitimate interest: security, fraud prevention, platform improvement
- Legal obligation: compliance with applicable laws
- Consent: for analytics cookies (you may opt out at any time)
5. Data Sharing
We do not sell your personal data. We share data only with:
- Clerk — authentication provider
- Paddle — payment processing
- Railway — backend hosting (EU/US regions)
- Vercel — frontend hosting
- Google Analytics — anonymized usage analytics
All third-party providers are contractually bound to protect your data.
6. Data Retention
- Account data: retained while your account is active and for up to 2 years after deletion
- Analysis results: retained in your dashboard until you delete them
- Source code: not retained beyond the analysis session
- Payment records: retained for 10 years as required by law
7. Your Rights
Under GDPR and applicable laws, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict certain processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, contact us at support@javaperf.com. We will respond within 30 days.
8. Cookies
We use the following cookies:
- Authentication cookies (Clerk) — strictly necessary, cannot be disabled
- Analytics cookies (Google Analytics) — used to understand usage patterns. You may opt out via your browser settings or Google's opt-out tools.
9. Security
We implement industry-standard security measures including HTTPS encryption, secure authentication, and access controls. However, no system is 100% secure and we cannot guarantee absolute security.
10. International Transfers
Your data may be processed in Morocco, the European Union, or the United States depending on the infrastructure provider. Where data is transferred outside the EU, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.