Data processing terms

Effective: 10 November 2026

When you, or the team you belong to, connect analytics that contain personal data, you are the controller and Matej Kujundzic is your processor (GDPR Article 28 and the Serbian Law on Personal Data Protection). These terms form part of the terms of service.

The results of the queries the AI runs, as they appear in chats you sync, and the connection settings you sync. We process them only to show them back to you and your team.

Our server also passes on your calls to your tools other than Kibana, with the keys or passwords they carry and the answers they bring back, and keeps none of them as they pass. Our host’s request logs keep each call’s address.

  • We process the data only on your documented instructions, which are these terms and your use of the app.
  • Everyone who can access it is bound to confidentiality.
  • We protect it as Article 32 requires: encryption in transit, keys and passwords kept only in your browser or sealed with your passphrase and used by our server only for the call that carries them, and access to the server limited to the operator.
  • We use the sub-processors listed below, and tell you before adding one, so you can object.
  • We help you answer requests from the people the data is about, and with security, breach notification and impact assessments.
  • We tell you without undue delay after we learn of a breach that affects your data.
  • When the service ends, we delete the data (you can export it first), unless the law requires us to keep it.
  • We give you the information needed to show these commitments are met, and allow audits on reasonable notice.
  • Railway Corporation: hosting of the website and the account database, in an EU region.
  • Functional Software, Inc. (Sentry): error reports, in Germany (EU).
  • GitHub, Inc. and Google LLC: sign-in, only when you choose them.

Matej Kujundzic works from Serbia, which has no EU adequacy decision. For personal data from the EEA, the Standard Contractual Clauses adopted by the European Commission (Decision (EU) 2021/914), Module Two (controller to processor), apply between you and Matej Kujundzic and form part of these terms. The account database and error reports stay in EU regions.