Privacy Policy
What we collect, why, and how long we keep it.
Updated 2026-09-03
Who we are
SELCOR operates Envlet. This policy covers envlet.dev, the dashboard, the API, the CLI, the SDKs, and the MCP server.
What we collect
Account data: your email address and name, and the organization you belong to.
Service data: the projects, environments, variable names, and encrypted values you store; the identities and tokens you create; and resolution records that name the identity, project, environment, key names, source IP, and time of every read. Resolution records never contain values.
Technical data: request logs with IP address, user agent, and timing, kept for operating and securing the Service, and error reports sent to Sentry with the value fields removed.
Why we use it
To provide the Service, to authenticate you, to bill Pro plans, to secure the Service and investigate abuse, to send you transactional email such as sign-in links and token expiry warnings, and to answer support requests.
We do not sell personal data. We do not use your data for advertising. We do not use stored values or resolution records to train models.
Where it goes
Data is processed by the subprocessors listed at envlet.dev/legal/subprocessors, mainly Cloudflare (compute, network, email delivery) and PlanetScale (database) in the United States. We only share data with them to provide the Service.
How long we keep it
Account and service data for as long as your account exists. Resolution records for 90 days on Pro and 7 days on Free within the dashboard, and an archive without values for 13 months after an organization is deleted. Request logs for 30 days. Encrypted values are deleted when you delete them or the organization.
Your rights
You can correct or delete your data from the dashboard, and ask us for an export at hello@envlet.dev. Depending on where you live you may have further rights under the GDPR, the UK GDPR, or the CCPA, including access, portability, and objection. We answer every request.
Cookies
The dashboard uses a session cookie to keep you signed in. The marketing site sets no analytics or advertising cookies.
Changes
We may update this policy and will announce material changes by email. Questions go to hello@envlet.dev.