Privacy policy

Software you run yourself

The MCP server, the SDK and the plugins run on your computer. The KiCad plugins work fully offline. They talk directly to your BenchPod over your network or USB. They have no telemetry and no usage analytics, and send nothing to us unless you use a feature that needs embeddedci.com:

• connecting to a cloud BenchPod (embeddedci:<name>),
• the waveform library, or saving a capture as a recording,
• saving a wiring profile to your account.

Those features send your API key and the commands and data of that request to embeddedci.com. We handle them as described below.

The AI assistant you use (for example Claude or Codex) sees the tool calls it makes and their results, such as UART output and capture summaries. What that provider does with them is covered by its own privacy policy, not this one.

What we collect

• Account details from the sign-in provider you choose (GitHub, Google, Microsoft or Atlassian), or that you enter when you sign up with an email address: name, email address and profile picture. If you sign in with a password, we store only a salted hash of it.
• Your organization's data: API keys, devices, wiring profiles, jobs and their logs, firmware you upload for flashing, captures, recordings and waveforms, and board files you upload to the EMI and trace length tools.
• BenchPod data: the pod's identity key, and for each cloud connection the time it connected and disconnected, its firmware version and board, its status and power readings, and the reset cause or crash report it sends after a restart. We use it to support your pod and find firmware bugs.
• Forms you submit, such as a BenchPod request or a contact message: the contact and shipping details and the message you enter.
• How you found us: when you sign up or submit a form, we store where your visit came from: the campaign tags and ad click ID in the link you followed, the referring page (without its query string) and the first page you saw. We use it to see which channels bring people to EmbeddedCI.
• Tool usage: when you run the EMI Analyzer or the trace length tool, we record which tool, the board and project name, the file size and the time, to see how the tools are used.
• Technical data: IP address, browser and request logs, used to run and secure the service.
• Cookies: essential cookies keep you signed in and, when you use the EMI Analyzer or the trace length tool without an account, give your browser its own private workspace. Website analytics and advertising tags (Google Analytics, Google Ads and the Reddit Pixel, loaded through Google Tag Manager) run only after you accept cookies in the banner. Rejecting them keeps them off, and then we also send nothing about you to an advertising platform from our servers.

How we use it

To provide the service you asked for, keep it secure, fix problems, answer support requests, and ship BenchPods you request. We may email you about your account and your BenchPod. We do not sell your data, and we do not use your data or your organization's data to train AI models. Our servers do not send your data to any AI provider.

Who we share it with

The providers that run the service for us, under their data processing terms, and, only if you accept cookies, our analytics and advertising partners:

• DigitalOcean: hosting, database and file storage (United States).
• Cloudflare: network delivery and protection.
• Resend: sending email, such as sign-up confirmations and replies to your messages.
• Slack: internal notifications to our team when someone signs up or submits a form (name and email address).
• The shipping carrier and customs authorities, when we ship you a BenchPod (name, phone number and shipping address).
• Google: website analytics and measuring our Google ads, only if you accepted cookies.
• Reddit: measuring our Reddit ads, only if you accepted cookies. The Reddit Pixel runs in your browser, and when you sign up or submit a form our server also tells Reddit about it, with your email address and IP address in hashed (SHA-256) form, your browser's user agent and the Reddit ad click ID. Reddit handles this data under its own privacy policy.
• The sign-in provider you chose, to sign you in.

We also disclose data when the law requires it.

How long we keep it

Account and organization data is kept while your account exists. Data you delete (a recording, a waveform, an API key) is removed from the service. When you close your account we delete its personal data and your organization's data, except what we must keep by law. Guest workspaces are deleted after 7 days without activity. Request and audit logs are kept only as long as needed for security, support and debugging, and no longer than 12 months.

Your choices and rights

You can ask to see, correct, export or delete your data by emailing hello@embeddedci.com. We answer within 30 days. Where local law (such as the GDPR or the CCPA) gives you more rights, we honor them.

Security

Traffic to embeddedci.com is encrypted with TLS. BenchPods authenticate with a per-device key, and access to a cloud pod needs an API key or a signed-in member of its organization.

Children

The service is not directed at children under 13, and we do not knowingly collect their data.

Changes and contact

We update this page when our practices change and change the date at the top. Questions go to hello@embeddedci.com. See also our terms of service.