Privacy Policy

RefactorBI ("we", "us", or "our") is committed to respecting your privacy and protecting personal data. This Privacy Policy explains how information is collected, processed, and safeguarded when you visit our website (refactorbi.com) and use the RefactorBI community utility.

1. Data Controller

The data controller responsible for the processing of personal data on this website is:

• Project: RefactorBI
• Contact Email: privacy@refactorbi.com

2. What Data We Collect

We believe in strict data minimization. We collect only what is necessary to communicate with you:

• Early Access Waitlist: When you voluntarily submit your email address and optional professional role through our website form, we collect your work email, selected role, and the timestamp of submission.
• Technical Request Data: Standard server transit logs (such as IP address, browser user-agent, and request timestamp) processed automatically by our hosting and CDN infrastructure for security, DDoS protection, and rate limiting.

3. What We Never Collect: Zero Model Telemetry

RefactorBI is an architecture-first developer utility designed to run locally on your machine or inside your own private container:

• No Data Rows: RefactorBI reads only tabular schema metadata (.pbip, .tmdl, .bim). It never inspects, accesses, or queries underlying business rows or customer data.
• No Model Telemetry: Semantic models uploaded to the local web workbench are parsed 100% in volatile memory and are never transmitted to external cloud databases.
• No Persistent Database: The free community edition operates without user accounts, analytics trackers, or external databases.

4. Cookies and Tracking Technologies

This website does not use tracking, advertising, or profiling cookies. We do not load Google Analytics, Meta Pixels, or third-party behavioral trackers. As no non-essential cookies are stored on your device, a cookie consent banner is not required under Directive 2002/58/EC (ePrivacy Directive).

5. Legal Basis for Processing (GDPR Article 6)

We process your personal data under the following legal bases:

• Consent (Art. 6(1)(a) GDPR): When you submit your email for early access, you grant consent to receive product release notifications and access invitations regarding RefactorBI.
• Legitimate Interests (Art. 6(1)(f) GDPR): For maintaining server security, spam filtering (via honeypot mechanisms), and preventing abuse of our web endpoints.

6. Third-Party Service Providers (Data Processors)

To operate this website securely, we work with selected service providers that comply with European data protection regulations:

• Cloudflare, Inc.: Provides edge hosting, CDN caching, SSL encryption, and security mitigation. Cloudflare processes transit data under Standard Contractual Clauses (SCCs).
• Formspree, Inc.: Processes form submissions and delivers waitlist entries to our inbox. Formspree maintains GDPR compliance and processes data under a Data Processing Agreement with Standard Contractual Clauses.

7. Data Retention

Waitlist contact information is retained only for the duration of the preview program or until you request deletion. You can unsubscribe from our notifications at any time, after which your email is permanently removed from our active distribution lists.

8. Your Rights Under GDPR (Articles 15-22)

As a data subject within the European Union, you are entitled to the following rights regarding your personal data:

• Right of Access (Art. 15): Request confirmation of whether your data is being processed and obtain a copy of it.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): Request the permanent deletion of your email address from our records ("Right to be Forgotten").
• Right to Restriction of Processing (Art. 18): Restrict the processing of your data under specific conditions.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, machine-readable format.
• Right to Withdraw Consent (Art. 7(3)): Revoke your consent to receive waitlist notifications at any time.

To exercise any of these rights, email us at privacy@refactorbi.com. We will process your request within 30 days without charge.

9. Right to Lodge a Complaint

If you believe the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority in your EU member state of habitual residence or workplace. For users in Italy, the relevant authority is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

10. Updates to This Policy

We may update this Privacy Policy as RefactorBI evolves. Any revisions will be published on this page with an updated revision date.