Privacy Policy

OzenOps ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our software products.

Information We Collect

Information You Provide

We may collect information you voluntarily provide when you:

• Create an account or purchase a license
• Contact us for support or inquiries
• Subscribe to our newsletter or marketing communications
• Fill out forms on our website

This information may include your name, email address, company name, billing information, and any other information you choose to provide.

Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• IP address and general location data
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses

Information from the Plugin

Our Jenkins plugins send minimal information, solely for license validation purposes:

• License key
• Product identifier (which plugin is validating)
• A controller identifier, or, when a request does not include one (as older plugin versions do not), the Jenkins controller URL (the address of your Jenkins installation, as configured in Jenkins)
• Plugin version

The controller identifier is a SHA-256 digest of your Jenkins instance's built-in identity public key. It replaces the controller URL so that your Jenkins hostname is not sent to us, but it is not anonymous: it stays the same across restarts, URL changes, and all of our plugins on that controller, so it links your validation requests together, and anyone who can reach your Jenkins web interface can compute it from the identity key Jenkins publishes there. We do not verify it, and we use it only to group validation records for support and auditing, never to decide whether a license is valid.

In addition, as with any request made over the internet, our servers automatically receive the network source IP address of each license validation request. Our audit logs retain the source IP address, the controller identifier (or, for a request that does not include one, such as from an older plugin version, the Jenkins controller URL), the plugin version, and the validation outcome (plus, for successful validations, which product was validated), and we use them for rate limiting, abuse prevention, and support/security auditing. License keys themselves are never stored: not in audit logs and not in our database, which keeps only a cryptographic (SHA-256) hash for matching.

We do not collect:

• Jenkins job names or configurations
• Build logs or artifacts
• Source code or repository information
• Node names, labels, or status information
• Alert content or notification data
• Any credentials or secrets

All monitoring data stays on your Jenkins server. Alerts are sent directly from your server to your configured notification channels (Slack, PagerDuty, etc.) without passing through our systems.

How We Use Your Information

We use the information we collect to:

• Process transactions and manage your account
• Validate software licenses
• Provide customer support
• Send administrative information (e.g., purchase confirmations, license updates)
• Send marketing communications (with your consent)
• Improve our website and products
• Comply with legal obligations

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service Providers: Third parties that help us operate our business (e.g., payment processors, email services)
• Sentry: we use Sentry to find and fix errors on this website. When an error happens on our servers or in your browser, a report is sent to Sentry with technical details: the error message and where in our code it happened, the page address with its query string and fragment removed, and your browser and operating system type. Our setup tells your browser and our servers not to collect cookies, form contents or most request headers, and Sentry removes email addresses, the secret code in sign-in links, license keys and other secrets from these reports as it receives them, before they are stored. A report from your browser goes to Sentry directly, so Sentry also receives your IP address as part of that request; our setup tells Sentry not to record it. Performance monitoring: for a small sample of page views and requests, your browser and our servers also send Sentry timing measurements of how the page loaded and responded, under the same address and data rules as error reports. Sentry keeps this data under its standard retention period. Blocking requests to Sentry with a browser content blocker stops your browser from sending any of this, without affecting how the site works.
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Account information is retained for the duration of your account plus a reasonable period thereafter.

Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Data portability
• Withdraw consent

To exercise these rights, please contact us at [email protected].

Cookies

Our website may use cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers are located. By using our services, you consent to such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: [email protected]