Detent PointWho we are. Detent Point LLC, a software company based in Vancouver, WA, USA. Questions about this policy, or about your data: privacy@detentpoint.com.
What we collect.
- Your email address when you request a free API key, email us, or activate a marketplace subscription. For marketplace purchases this is the address your license file is sent to.
- Payment details when you buy a paid plan — see “Payments” just below for who handles them.
- Standard request logs (IP address, timestamp, requested URL) kept by our hosting providers to operate and secure the service.
Payments. How your payment is handled depends on where you bought. If you purchased directly from us, payment information is processed by Stripe; we do not receive or store your card details. If you purchased through Microsoft Marketplace or Azure Marketplace, Microsoft is the merchant of record: Microsoft collects your payment information under Microsoft’s own privacy policy, and we never see it. Microsoft provides us with the information described in “Information we receive from Microsoft” below. If you purchased through AWS Marketplace, Amazon Web Services is the merchant of record on the same basis: AWS collects your payment information under the AWS privacy notice, we never see it, and AWS provides us with the information described in “Information we receive from AWS Marketplace” below.
Information we receive from Microsoft. When you subscribe to one of our products through Microsoft Marketplace, Microsoft sends us a limited set of information about the subscription through Microsoft’s SaaS fulfillment API. This typically includes the email address of the person who purchased the subscription, the name of the purchasing organization, your Microsoft Entra tenant identifier, a subscription identifier, and which plan you selected. We use this only to activate your subscription, issue your license, provide support, and keep our records of who is entitled to what. We do not use it for marketing. Microsoft’s handling of your data is governed by Microsoft’s privacy statement, not this one.
Information we receive from AWS Marketplace. When you subscribe through AWS Marketplace, the information we receive from AWS is narrower than what Microsoft sends. AWS identifies your subscription to us with a registration token, which we exchange with AWS for a customer and account identifier, the product code, and which plan you bought. AWS also notifies us when your entitlement changes, for example on renewal or cancellation, and those notifications carry the same identifiers.
AWS does not give us your email address. That is why our activation page asks you for one: we need somewhere to send your license file. The address you type there is supplied by you, not by AWS. We use it to send your license as a .lic attachment, to send a fresh license when your subscription renews, and to let you retrieve your current license if you come back through AWS Marketplace later. We do not use it for marketing. AWS’s handling of your data is governed by the AWS privacy notice, not this one.
Why we collect it. To issue and meter API keys, respond to your messages, process payments, prevent abuse, and keep the service running. That’s the whole list.
Who we share it with. Only the service providers needed to run the business: Stripe (payments for direct purchases), Cloudflare (website hosting, security, and cookieless analytics), Microsoft Azure (product API hosting), Microsoft Corporation (marketplace transactions and subscription management for purchases made through Microsoft Marketplace), and Amazon Web Services (marketplace transactions and entitlement management for purchases made through AWS Marketplace). We do not sell your data, and we do not share it for advertising.
Cookies and tracking. This site sets no advertising or analytics tracking cookies. We measure site usage with Cloudflare Web Analytics, which is cookieless and does not profile you across sites — it gives us aggregate page views, paths, and referrers. Our content security policy blocks every other third-party script, so there are no ad-network trackers on these pages.
The DetentShell desktop app. DetentShell collects no data. The app initiates no network traffic on its own; the only network activity is what you start yourself inside your PowerShell sessions (for example Update-Help, module installs, or WinRM remote sessions you open). The app writes its logs and settings only to your own machine, and we never receive them. Purchases are made through the Microsoft Store and processed entirely by Microsoft; we never see your payment details, and Microsoft’s own privacy statement governs that transaction.
Information SqlCertForge processes. SqlCertForge provisions TLS certificates for SQL Server and SQL Server Reporting Services. To do that it reads and writes information on the servers you point it at. That information can include certificate subjects and subject alternative names, certificate thumbprints and validity dates, server and instance names, Reporting Services URL reservations, the relevant registry configuration, and the name of the Windows account the SQL Server or Reporting Services service runs under. Service account names are sometimes derived from a person’s name, so this information can be personal information in some jurisdictions.
All of it stays with you. SqlCertForge runs inside your own environment and makes no outbound call to Detent Point at run time. It talks only to your own certificate authority, your own SQL Server and Reporting Services hosts, and the report URLs you give it. Where you install a scheduled renewal job, its configuration and its log are written to the machine that runs it and stay there. We never receive any of it. The only information that reaches us is the subscription and entitlement identifiers, the plan, and the one email address described above.
Information ClusterValidator processes. ClusterValidator inspects Windows Server Failover Clusters. To do that it reads configuration and state information from the cluster nodes you point it at. That information can include node hostnames and IP addresses, cluster and network configuration, storage and quorum configuration, installed update levels, and the names of Active Directory computer accounts and service accounts associated with the cluster. Service account names are sometimes derived from a person’s name, so this information can be personal information in some jurisdictions.
ClusterValidator is read-only. It does not modify cluster state, and it does not read the contents of your databases or application data. ClusterValidator as distributed through Microsoft Marketplace is self-hosted: you run it in your own environment, and your cluster data and reports never leave it.
Licensing and usage records. This works differently for our two kinds of product, and the difference is worth reading.
Self-hosted products are the ones you install and run on your own machines: SqlCertForge, ClusterValidator, SpnManager, and DetentShell. They verify their licenses offline. The license file is validated on your own machine using a signature check; the software does not contact us to check whether your license is valid, and it does not report your usage back to us. Where a plan includes a usage allowance, the record of that usage is kept in a local file on the machine where the software runs. It stays on your machine. We do not collect it.
Hosted products are the ones you reach over the network with an API key, including GitEasy and WikiMint. These necessarily work the other way around: your calls arrive at our service, so we count them against your plan’s monthly allowance and use that count to send you the usage alerts at 80% and 100% of your limit that your plan describes. We keep the call count, the time of the call, and which API key made it.
What a hosted product receives from you depends on what you send it. WikiMint generates documentation from source code, so the source you submit is processed by the service in order to produce the pages you asked for. If you need a written account of exactly what a hosted product receives, how long it is held, and whether it is retained after your call completes, email privacy@detentpoint.com and we will give you one in writing.
How long we keep information.
- Account, subscription, and license records: kept for the life of the subscription and for 7 years afterward, so we can meet tax and accounting obligations.
- Support correspondence: 2 years from the last message in the conversation.
- Server request logs: 30 days, as kept by our hosting providers.
Your choices. You can ask us to access or delete your data at any time. Email privacy@detentpoint.com and we’ll respond within 1 to 2 business days.
Security. To report a vulnerability, email security@detentpoint.com.
Changes. If we change this policy we’ll update the date above. Material changes affecting paid customers will be sent by email.