Privacy Policy
Last updated:
This notice explains what data Patchrooms handles and how. Questions? Email [email protected].
Two kinds of data
Feedback data is what our customers collect from their own users through the Patchrooms widget. For this data the customer is the controller and Patchrooms acts as a processor on their behalf — the customer decides what is captured and is responsible for having a lawful basis to collect it.
Account and website data is what we collect directly: dashboard sign-ins and analytics on our marketing website. For this data Patchrooms is the controller.
Feedback captured through the widget
When a reviewer files feedback, the widget attaches some context automatically:
- The page URL, path, and host.
- The browser user-agent, language, viewport and screen size, and inferred device type.
- A timestamp.
- The most recent console errors on the page, if the customer enables that option.
Depending on what the reviewer adds to a report, it may also include:
- Typed text.
- A screenshot of the page (which can contain whatever is visible on screen at the time).
- A voice recording captured from the microphone, with the browser's permission.
- A highlighted text selection or the selector of a clicked element.
Customers can also attach their own custom attributes (for example an internal user id) and, if they configure it, a signed identity token. Where an email address is present in that token it is intentionally not stored.
Dashboard accounts
Signing in to the dashboard uses Google or GitHub. We store your email address, name, avatar URL, and which provider you used. A session is kept in a single functional cookie that expires after about 30 days.
Marketing website analytics
Our marketing website (patchrooms.com) uses Google Analytics to understand traffic. Google sets cookies and receives your IP address and information about the pages you visit, acting as our processor for this. The Patchrooms product itself — the feedback widget and the dashboard — contains no third-party analytics or advertising trackers.
Cookies
- On the marketing website: Google Analytics cookies.
- In the dashboard: a single functional session cookie. No tracking or advertising cookies.
Service providers (sub-processors)
We rely on the following providers to run Patchrooms:
- Google Cloud — hosting (Cloud Run) and file storage for screenshots and audio (Cloud Storage).
- MongoDB Atlas — our database and session store.
- Google and GitHub — sign-in for dashboard accounts.
- OpenAI and Groq — audio transcription, only when a customer enables it; the audio is sent to the provider to produce a transcript.
- Cloudflare — hosting and delivery of the marketing website.
- Google Analytics — marketing website analytics.
Retention and deletion
- Reports are kept until they are deleted. Each project can set a retention window that auto-deletes older reports.
- Uploaded screenshots or audio that never get attached to a report are removed within about 24 hours.
- Dashboard sessions expire after about 30 days.
What we don't do
We do not sell your data, and we do not use feedback data for advertising. The product carries no third-party trackers.
Contact
Questions about this policy? Email [email protected].