Privacy & analytics

Apito uses PostHog (via a first-party proxy) on apito.io andapp.apito.io to measure product activation — not to sell personal data.

What we collect

• Anonymous product events (page views, experience interactions, clone starts)
• Authenticated user id after Console login (stable internal id)
• Optional session recording with input masking enabled

What we never send to PostHog

• Emails, passwords, tokens, DSNs
• Full schema source or document payloads
• Lead-capture form contents (stored server-side with consent only)

“Email me this schema”

Requires explicit consent. We store email, consent timestamp, source path, and manifest id/version. You can request deletion; transactional mail includes an unsubscribe path when configured.

Cookies

Cross-subdomain cookies may be used so marketing → Console journeys stay attributable. Localhost capturing is disabled.

Questions: [email protected]