Privacy Policy

Who we are

Command is operated by Brechin Capital. This policy covers incommand.dev, the Command app, and the Command feedback widget. Questions go to the contact form on this site.

What we collect

From our customers: account details (name, work email, organization) and the settings and integrations you connect, such as GitHub and Linear.

From people who submit reports through the widget on a customer's site: the report text, plus the page address, viewport size, recent clicks, console errors, and failed network requests at the time of the report. Keystrokes are never captured.

From visitors to this website: anonymous usage analytics (pages viewed, buttons clicked) and anything you send through the contact form.

How we use it

To run the service: turning reports into issues, sending them to the tools you connect, and replying to reporters. To answer contact requests. To understand how the website is used. We do not sell personal data or use it for advertising.

Retention

Widget reports and their session context are deleted automatically after 30 days. Account data is kept while your account is active and deleted on request after it is closed.

Who we share it with

Service providers that run Command on our behalf: hosting and database (Railway), sign-in (WorkOS), website hosting (Vercel), analytics (PostHog), and email (Resend). Integrations you connect, such as GitHub and Linear, receive the data needed to do what you asked. We disclose data when legally required.

Security

Data is encrypted in transit. Integration credentials are encrypted at rest. Access is limited to people who need it to operate the service.

Your rights

You can ask to access, correct, export, or delete your personal data. If you submitted a report through a customer's widget, that customer controls the report; contact them or us and we will help.

Changes

We will update the date above when this policy changes, and notify customers of material changes.