Legal

Reify is operated by DERIVE LTD, a private limited company registered in England & Wales.

Company number: 17159546

Registered office: 26 Swanston Grove, Blyth NE24 3UY, United Kingdom

Contact: [email protected]

Data controller: DERIVE LTD (details above).

What we collect:

• If you sign in: your identifier from Google or GitHub OAuth (id, login, display name, avatar URL). We store this in a server-side session.
• If you visit a project page or use the demo: a sha256 hash of your IP address (we never store the raw IP), your user agent string (truncated), and the project you visited.
• If you commit changes through the editor: an audit record of the change (which user, which project, what changed) so commits can be traced.
• Cookies: a single first-party session cookie for authentication. No analytics or advertising cookies.

Why we collect it: to run the service (authentication, session continuity), to detect abuse and answer the question "is anyone using this?", and to email the admin when something noteworthy happens. Lawful basis: legitimate interest (UK GDPR Article 6(1)(f)). For authenticated users with project access, it's also contract performance (Article 6(1)(b)).

Retention: session cookies expire after 7 days (4 hours for the demo). Analytics events are auto-deleted after 90 days. Workspace edits are kept until you reset or delete them.

Sharing: we use Resend (resend.com, US) to deliver internal admin notifications, and Cloudflare for DNS / CDN. We don't share data with anyone else and we don't use any third-party analytics, ad networks, or trackers.

Your rights: you can request a copy of your data, ask us to delete it, or object to processing by emailing [email protected]. You can also complain to the UK ICO at ico.org.uk.

Reify is provided as-is, without warranty. DERIVE LTD makes no representations about the accuracy, completeness, or fitness for any particular purpose of the data shown. Don't use it as the sole basis for safety-critical or regulatory decisions.

By using the service you agree not to attempt to break, scrape, overload, or otherwise abuse it. Account access is at the discretion of DERIVE LTD and may be revoked at any time.

These terms are governed by the laws of England & Wales.