Molar

Privacy Policy

Version 2026-07-01

1. Scope

This Privacy Policy explains how Molar (“we”) collects, uses, and protects information when you use the Molar platform and dashboard. It applies to account data, organization data, and the artifacts the Service processes on your behalf.

2. What we collect

  • Account data: email, name, hashed password (or OAuth identifier), and your acceptance of these legal documents.
  • Organization data: organization name, members and roles, billing/plan status, and connected repositories.
  • Service data: test scenarios, exploration maps, run results, traces, and logs you generate. Secrets and provider keys are stored encrypted and are never returned in API responses or logs.
  • Operational data: request metadata, IP address, and usage counters used for security, rate limiting, and quotas.

3. How we use it

We use your data to operate the Service: authenticate you, run and display tests, enforce quotas and abuse controls, send transactional email (verification, password reset, invitations, run/PR-gate notifications), and improve reliability. We do not sell your data.

4. Subprocessors and model providers

We rely on infrastructure and model providers to deliver the Service (e.g. managed Postgres, managed Redis, compute, and LLM providers). When you use bring-your-own-key, your LLM calls are routed to the provider you configure. We share only what is necessary to perform the Service.

5. Data location and security

Data is stored in managed cloud infrastructure. We apply encryption for secrets, tenant isolation enforced at the database layer (row-level security), input validation, and SSRF protection on target URLs.

6. Retention and your rights

Organization owners may submit owner-only export and deletion requests from the dashboard. During beta, requests that lack an automated store adapter enter manual support review; we do not provide a download or complete deletion until every product store is verified. The organization remains available while deletion is being reviewed. You may also request access to or correction of your personal data by contacting us.

7. Changes

We may update this Policy; the version date above reflects the current revision. Material changes will be communicated.

8. Contact

Privacy questions or requests: support@molar.it.