1. Introduction

Performant (“the Platform”) is operated by Highly Performant Limited, located at Smart Station, Floor 1, Masdar City, Abu Dhabi, United Arab Emirates.

This Privacy Policy explains how we collect, use, and protect personal data when you use Performant — an AI-powered analytics platform that helps technology leaders measure, understand, and improve team performance and ROI.

By using Performant, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Platform.

2. Data We Collect

We collect the following categories of data:

Personal Information: name, work email, and profile details.
Login & Credentials: authentication details (including via OAuth/SSO).
Usage Data: app activity, interactions, logs, and performance metrics.
Device & Network Data: IP address, browser type, operating system, and device identifiers.
Integrated Source Data: metadata and performance data from connected services (e.g., Jira, Monday, GitHub, CI/CD tools).
Financial Data: limited billing information handled securely via Stripe.
Behavioral & Productivity Analytics: aggregated insights derived from your workspace data and actions.

3. How We Use the Data

We process your data to:

Operate, maintain, and improve Performant’s features.
Generate AI-driven analytics and insights.
Authenticate users and maintain secure sessions.
Send service updates, onboarding guidance, and account notices.
Conduct research and improve models.
Comply with legal and financial obligations.

We do not sell personal data under any circumstances.

4. Legal Basis for Processing (GDPR)

If you are located in the EU or UK, we rely on the following legal bases for processing your personal data:

Contractual necessity: to provide the Platform and services you requested.
Legitimate interests: to improve our analytics and ensure system security.
Consent: for analytics tracking, marketing communication, or data integrations.
Legal obligation: when required to comply with applicable laws or financial regulations.

5. Data Sharing and Third Parties

We may share limited data with trusted third-party processors to operate the Platform, including:

Google Analytics – analytics and usage tracking.
MailerLite – email communication and notifications.
Stripe – payment processing.
Cloud hosting providers (US-based) – infrastructure and data storage.

All third parties are bound by strict data-processing agreements consistent with GDPR, CCPA, and UAE PDPL requirements.

6. Data Storage and Transfers

Data is primarily stored in secure cloud environments located in the United States.

If you are located outside the US, your information may be transferred and processed in countries that may not have equivalent data-protection laws. We ensure adequate safeguards (e.g., Standard Contractual Clauses) for such transfers.

7. Retention

We retain your data only as long as necessary for the purposes described above or as required by law. When your account is deleted or becomes inactive, we securely delete or anonymize your data within a reasonable timeframe.

8. User Rights

Depending on your location, you may have the following rights:

Access and obtain a copy of your data.
Request correction or deletion.
Object to processing or withdraw consent.
Request portability of your data.

To exercise these rights, contact us at privacy@highlyperformant.com. We respond within the time frames required by applicable law (e.g., 30 days under GDPR).

9. Cookies and Tracking

We use cookies and similar technologies for analytics and improving user experience. Cookies may be set by Google Analytics or similar providers. You can adjust cookie settings through your browser or device preferences.

10. Security

We use industry-standard security measures, including encryption, network firewalls, and secure authentication, to protect your data from unauthorized access or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Performant is intended for professional users and is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top indicates the most recent revision. Significant changes will be communicated via email or in-app notice.

13. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact:

Highly Performant Limited
Smart Station, Floor 1, Masdar City, Abu Dhabi, United Arab Emirates
Email: privacy@highlyperformant.com