Privacy
This policy distinguishes local CLI analysis from authenticated SaaS, billing, and optional synchronization instead of treating all Speculynx processing as one data flow.
Speculynx determines the purposes and means of the personal-data processing described here. Privacy requests can be sent to contact.speculynx@gmail.com. Publisher registration and postal details are maintained in the Legal notice once revalidated.
OpenAPI and Network Policy source input files analyzed by the local CLI remain on the machine running the CLI. License or entitlement verification does not by itself upload those source files to Speculynx.
If you explicitly synchronize an audit, the CLI sends the bounded, versioned synchronization payload required for that feature. The current product contract does not treat synchronization as an upload of the source OpenAPI document.
The web application uses Clerk for authentication. Account and authentication data necessary to create, secure, and operate an account may therefore be processed by Speculynx and Clerk according to their respective roles and applicable terms.
The authenticated web application communicates with the Speculynx backend using account authorization. The backend may process account identifiers, entitlement state, audit or synchronization metadata, support context, and technical data required to provide the requested service.
Stripe processes payment and billing data when you purchase a subscription or product. Speculynx processes the transaction, customer, entitlement, and billing status needed to provide the purchased service, but the web application does not require storage of complete payment-card details.
Processing may be necessary to perform a contract or requested pre-contractual steps, comply with legal obligations, secure and operate the service under legitimate interests, and handle optional communications on the basis required for that communication. A processing activity is not assigned a legal basis merely because data exists.
Personal data is limited to people and service providers that need it for the relevant purpose. Current web-app evidence confirms Clerk for authentication and the product contract confirms Stripe for payment flows. Additional backend processors must be added here only after they are verified against the current production service.
Personal data is retained only for as long as needed for the stated purpose and any applicable legal, accounting, security, dispute, or contractual retention period. Where an exact period has not been verified against the current backend, Speculynx uses the applicable operational and statutory retention criterion rather than reproducing an obsolete historical duration.
Some service providers may process data outside the European Economic Area. Where this occurs, the transfer must rely on an applicable legal transfer mechanism and the provider's current contractual safeguards. Provider-specific transfer claims are published only after verification.
Authentication and application features may require technically necessary cookies or browser storage. Speculynx does not infer from that alone that advertising or analytics consent is required. Any non-essential tracker must be assessed and, where required, blocked until valid consent is obtained.
Subject to the conditions of applicable data-protection law, you may request access, rectification, erasure, portability, restriction, or object to processing, and may withdraw consent where consent is the legal basis. You may also lodge a complaint with the CNIL.
Legal notice identifies the publisher. Terms govern use and purchases.