Privacy
What we keep, and for how long
This page covers the interest form and the invitation sign-in on coralreefventures.com, and Streamlane: its workspaces at an address under streamlane.app, open for now to invited guests. Coral Reef Ventures, Inc. runs both. There is no tracking, no analytics and no third-party script on this site or in Streamlane.
What the interest form stores
When you send the form we store your name, email address, organization, how you would like to take part, your message, the site you came from, and when we received it. We use it to read your message and reply. Nothing you type there creates an account or an invitation.
A submission we have not yet reviewed is kept until we review it. One we have declined or archived is deleted 12 months after that decision. One we turned into an invitation is kept as long as the invitation is.
What the invitation sign-in stores
Sign-in is by invitation only, through Google. For an invited person we store the email address the invitation went to, the identity Google gives us for it, the sites the invitation covers, and a record of when it was sent, accepted or revoked. Google tells us your name and verified email address; we receive nothing else from your Google account.
An accepted invitation is kept while it is active, or until you ask us to erase it. A pending or revoked one is deleted 12 months after its last change. Sign-in records are kept for 12 months, and records that a site opened for you are kept for 90 days. A sign-in attempt by someone who was not invited is not recorded: we count it, and keep no address.
What your browser keeps
Your browser keeps the sign-in tokens, an anonymous identity the form uses to send, and your choice of color scheme. The sites behind the door set two cookies of their own: one for 10 minutes when they send you here to sign in, and, once you have signed in with an invitation, one for an hour that proves it. A third, kept for 30 days and holding nothing about who you are, only remembers that this browser has signed in before, so an expired hour can renew without stopping you. Nothing here is used to follow you between sites.
Logs and backups
Our server logs record that something happened, never who you are or what you wrote, and are deleted after 1 month. Deleted records can remain in backups for up to 35 days. A request limit keeps a count per source for 24 hours, under a key that is discarded each day.
Deletion happens within a few days after the date above, because the database removes expired records on its own schedule.
Page counts
To know whether anyone reads this site, we count how many times each page is requested each day, and which site the request came from, by its name only, from our host's own logs. We leave out known bots. We keep those counts for 13 months. We never keep an address, a browser, or anything else that could tell one visitor from another, and nothing runs in your browser to make the count.
Having your data erased
To see, correct or erase what we hold about you, or about an address someone else submitted, write to hello@coralreefventures.com. We erase it, and the record of the erasure holds ids only.
Streamlane: signing in
You sign in to Streamlane with Google. Google gives Streamlane your name, your verified email address and the address of your profile picture, and nothing else from your Google account. Streamlane keeps a profile with those, when you last signed in, and the color scheme and picture you choose. Which workspaces you can open is decided by invitations: an invitation holds the address it went to, the role it gives and who sent it.
Streamlane: what you put in it
A workspace holds what its people put in it: work items, docs, comments, files, goals and the rest, with a history of who changed what. It is stored by Amazon Web Services in the United States (Ohio). In Streamlane, only the people in that workspace can see it, as their roles allow. An admin can make a team public, so anyone can read its ideas and roadmap, or make a whole workspace public, so anyone can read it as a viewer does. If you add an insight to a public idea, it carries your name and the team's members can read it; other visitors see only how many insights there are. We do not sell it, and we do not use it to train models.
Some features send part of it to a model. The help assistant sends your question, with passages of Streamlane's published help, to Anthropic's Claude on Amazon Bedrock, and keeps the question nowhere. Writing a query from plain words sends those words and the names of the fields, types and teams the query can use. Search sends each item's title and text to Amazon's Titan embeddings model on Amazon Bedrock to index it. These calls stay within Amazon Bedrock, in the United States.
If a workspace connects GitHub, Streamlane keeps the installation, each person's linked GitHub login, and each pull request's title, author, reviewers and address. If it connects Slack, Streamlane keeps the workspace's connection, the channels it is bound to, the threads it syncs, and which Slack person is which Streamlane person, matched by email address. Streamlane sends no email.
Streamlane: how long it is kept
What a workspace holds is kept while the workspace is in use. A deleted item stays in the trash for 30 days and is then purged; the history keeps the record that it existed. Notifications are deleted after 90 days. Removing someone from a workspace ends their membership there; their profile stays until they ask us to erase it. To have a workspace or your profile erased, write to us (below). Deleted records can remain in backups for up to 35 days, and an earlier version of a changed file for 7 days.
Streamlane's server logs record what happened and internal ids, not your name, email address or what you wrote, and are deleted after 1 month. The one exception is the contact form on streamlane.app: its log holds each message, with the address you gave, for that same month.
Streamlane: what your browser keeps
Your browser keeps Streamlane's sign-in tokens and a few preferences: the workspace and team you last opened, your recent places, and display choices such as the color scheme. Streamlane sets no cookies of its own.
Google's consent screens show the address of the sign-in service, coralreefventures.com's or Streamlane's, and link to this page. Google's own privacy policy governs what Google does with your sign-in.