Account data (name, email) is used only for authentication and team collaboration. Passwords are hashed with bcrypt and are never stored in plaintext.
On self-hosted deployments, all data stays on your own server — no data is sent to third parties. Telemetry is opt-in and anonymous.
This document is an MVP placeholder — complete it with legal review before public launch.