Introduction

Delimit ("we," "us," or "our") is operated by Jamsons Holdings LLC. This Privacy Policy describes how we collect, use, and protect information when you use the Delimit website (delimit.ai), dashboard (app.delimit.ai), CLI tools, GitHub Action, and MCP toolkit (collectively, the "Service").

Information We Collect

Account Information

When you create an account or sign in via GitHub OAuth, we collect:

Email address
Name
GitHub username and avatar URL

Usage Data

When you use the hosted dashboard or API, we collect:

Tool calls and governance events (lint results, diff results, policy evaluations)
Session metadata (timestamps, feature usage counts)
Error logs for debugging and reliability

What We Do Not Collect

The Delimit CLI and MCP tools run entirely on your machine. When you use these local tools, no data is transmitted to our servers. Your API specifications, source code, governance policies, and ledger contents remain on your local filesystem.

How We Store Data

Account and usage data for the hosted dashboard is stored in Supabase, hosted in the United States (US-East region). Data is encrypted in transit (TLS 1.2+) and at rest. We retain account data for as long as your account is active.

How We Use Your Information

To provide, operate, and maintain the Service
To authenticate your identity via GitHub OAuth
To display governance history and audit trails in the dashboard
To send transactional emails (account verification, password resets)
To improve the Service based on aggregated, anonymized usage patterns

No Data Sales. No AI Training.

We do not sell, rent, or trade your personal information to third parties.

We do not use your data to train AI models. Your API specifications, governance policies, code, and usage data are never fed into any machine learning pipeline.

Third-Party Services

We use the following third-party services:

Supabase — database and authentication infrastructure
Vercel — website and dashboard hosting
GitHub — OAuth authentication and GitHub Action execution

Each third-party service processes data in accordance with their own privacy policies. We do not share data with any other third parties.

Cookies

We use only essential session cookies for authentication (via NextAuth). These cookies are required for the Service to function and cannot be disabled. We do not use any analytics cookies, tracking pixels, or advertising trackers. There is no Google Analytics, no Facebook Pixel, and no third-party tracking of any kind.

Your Rights (GDPR and CCPA)

Regardless of where you are located, you have the right to:

Access — request a copy of all data we hold about you
Export — receive your data in a portable, machine-readable format
Correction — request correction of inaccurate data
Deletion — request deletion of your account and all associated data
Objection — object to specific processing of your data

To exercise any of these rights, contact us at hello@delimit.ai. We will respond within 30 days.

Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy, contact us at: hello@delimit.ai

Jamsons Holdings LLC
United States