Privacy Policy

Who we are

Twice Taught is operated by JarBeak Software. For anything in this policy, write to [email protected].

What we collect

Two kinds of thing.

Your account. Your email address, and optionally your name, phone number, timezone and date preferences. If you sign in with Google we store the identifier Google gives us so we can recognise you next time — not your Google password, which we never see.

What you record. Incidents, timelines, notes, questions, action items and learnings, including anything you or your colleagues type into them. We do not inspect this content. Worth saying plainly: incident write-ups often contain operational detail about your systems, so treat what you put here the way you would treat an internal document.

We also keep ordinary server logs, which include IP addresses, for security and for working out why something broke.

Who else sees it

We use a small number of services to run this one. Each sees only what it needs.

Stripe

Handles payments. Card details go to Stripe and never reach our servers. Stripe receives your billing email and the fact of your subscription.

Mailgun

Sends email — sign-in links, invitations and the daily digest. It receives the recipient address and the message.

Google

Receives nothing from us. If you choose to sign in with Google, Google tells us who you are.

If your organization connects PagerDuty or Slack, data moves between those services and this one because you asked it to. PagerDuty sends us incident events; Slack receives the notifications you have turned on. An administrator in your organization can disconnect either at any time.

We do not sell your data, and we do not use it to train anything.

Where it lives

On servers we rent in the United States. Backups, where they exist, are held in the same place.

How long we keep it

For as long as your organization has an account. Older incidents are never deleted automatically — on the free plan they stop being viewable after 90 days, but they are still there and become readable again if you upgrade.

When an account is closed we delete its data. Backups age out on their own schedule, so a copy may persist for a short period afterwards.

What you can ask for

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to [email protected] and we will respond within 30 days. If you are in the UK or the EU you also have the right to complain to your data protection regulator.

Cookies

One cookie, which keeps you signed in. We use no advertising or analytics cookies. Your light or dark theme preference is stored in your own browser and never sent to us.

Changes

If this policy changes in a way that matters, we will tell account holders by email before it takes effect.