Aline Data Collection Notice

General Data Collection

Unless stated otherwise here, data management is documented by Configura’s Privacy Notice.

All user created content of Aline is stored in the EU. As Aline is an online app, all the data that you create in Aline must be stored by us so that you can access it where you are. We can associate that data with you as a user.

Data on projects is held by the group of users on which it was created (or if moved to another group then it is held by that group instead). This data is kept by us until the group is disbanded. A group can be disbanded by an administrator of that group.

Project data of a group can be removed by any member of the group. It will be deleted 31 days after removal, unless reinstated by any member of the group.

Comments

The user can write comments/chat through Aline. The comments belong to the project, and the data will be kept as long as the project.

When a project is published, it is accessible by anybody, and so are your comments. Personal information such as your name is publicly available at that time.

Grafana Data Collection

Grafana is a tool to monitor systems. We collect the following data for use in Grafana.

IP Address

We keep track of the user’s IP address on calls to our backend. IP address can be used to identify a person. For us the IP is used to know who performed a certain action in Aline. We use this to be able to trace actions which results in issues. This is so that we can say that user A made call B to our backend which then resulted in error C. We can know the state of the system when A made the action allowing us to recreate the situation and the issue as a step in solving it.

The data is stored in the EU and we store this information for 31 days. After that time the data is changed so that it cannot be used to identify individuals.

Sentry Data Collection

Sentry is an online tool we use for error tracking. We use it to identify, diagnose, and resolve issues that happen to users of Aline.

When an error occurs in Aline, a report is automatically sent to Sentry with information about the user, the time, and information about the sequence of function calls that caused the issue. We also collect an ID for the issue, which can be used to connect the particular issue to other linked events.

Sentry is required for the proper operation of Aline, if we didn’t have this we would not be able to act on issues that happens in the app.

Sentry data is stored in the EU. Sentry retains event data in production for 90 days. Individual events are aggregated into broader issues. Individual events are deleted after the above retention period. Issues are deleted when all associated events are deleted. Sentry creates regular backups of event data in production. Backups are deleted 90 days after creation.

Auth0 Data Collection

When using Auth0 for authentication, we collect certain user-related data to ensure secure and reliable access. The collected data includes:

• IP address
• User information
• Login timestamps
• Number of login attempts
• Whether the login was successful or failed
• Browser details

The retention period for authentication logs is determined by Auth0. Based on their policies, logs are typically retained for two weeks before being automatically deleted. For further details on data retention, please refer to: ·

• Okta Privacy Policy
• Okta Security Information

We collect and store authentication data primarily for troubleshooting purposes. If a login attempt fails, the stored data allows us to investigate and resolve authentication issues effectively.

All authentication data processed by Auth0 is stored within the EU.