Last updated 30 October 2026

This privacy notice explains how Pywr Tools (“we”, “us” or “our”), run by Stefano Simoncelli, collects, stores, uses and shares (“processes”) your personal information when you use:

• Pywr for Azure DevOps, the extension for Azure DevOps;
• Pywr for VS Code, the extension for Visual Studio Code;
• this website, pywrtools.dev;
• or when you contact us, for example to buy a licence or to ask for support.

Together these are the “Services”. We decide how your personal information is processed. If you do not agree with this notice, please do not use the Services. If you have questions, email privacy@pywrtools.dev.

Summary

• We collect the identifiers of your Azure DevOps organisation and user, the details you give us when you buy a licence or contact us, and payment details, which Stripe handles.
• Your models, repositories, pull requests and comments stay in your Azure DevOps organisation or on your computer. Neither extension sends them to us. We do not process sensitive personal information and we do not collect information about you from third parties.
• We use this information to run the trial and the licence of Pywr for Azure DevOps, to take payment, to answer you and to meet our legal obligations.
• We share it with Stripe, which takes payments, and Cloudflare, which hosts the licence server. We do not sell your information.
• Depending on where you live, you can ask to see, correct or delete your information. Email privacy@pywrtools.dev.

1. What information do we collect?

Information sent by Pywr for Azure DevOps

Each time a user opens Pywr for Azure DevOps, the extension sends our licence server:

• the ID of the Azure DevOps organisation;
• the ID of the user in Azure DevOps.

Both are identifiers that Azure DevOps creates. They do not contain your name or email address. For an organisation that has bought a licence, the server stores each user ID with the date the user last opened the extension, so it can give each user a seat.

When someone in an organisation presses Buy a licence, the extension also sends the name of the organisation, which is saved with the subscription in Stripe.

The start date of the 30-day trial is saved in your own Azure DevOps organisation, in the storage Azure DevOps gives each extension. We do not receive it.

Pywr for VS Code

Pywr for VS Code runs on your computer. It does not send your models, results or any usage data to us.

Information you give us

When you buy a licence, ask for an invoice or contact us, we collect what you give us, which may include:

• names;
• email addresses;
• job titles;
• the name and billing address of your company.

Payment data

When you pay by card, Stripe collects your card number and security code. We never see or store them. Stripe’s privacy notice is at stripe.com/gb/privacy.

All personal information you give us must be true, complete and accurate. Please tell us when it changes.

2. How do we process your information?

We process your personal information to:

• run the trial and the licence, by checking whether the organisation has a licence and whether a seat is free for the user;
• take payment and manage your subscription, including invoices, renewals, changes in the number of seats and cancellations;
• answer your questions and give support;
• tell you about changes to the Services, to the price or to our terms and policies;
• keep the Services secure and prevent fraud;
• meet our legal obligations, such as keeping tax and accounting records.

3. What legal bases do we rely on?

The UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR) require us to explain the legal bases we rely on:

• Performance of a contract. To provide the licence you bought, to take payment and to answer requests you make before you buy one.
• Legitimate interests. To check licences and trials, to keep the Services secure and to prevent fraud. These interests do not override your rights.
• Legal obligations. To keep tax and accounting records, to cooperate with a regulator or law enforcement body, and to establish or defend legal claims.
• Consent. Where we ask for your consent, for example to send you news about the Services. You can withdraw it at any time.
• Vital interests. Where it is necessary to protect someone’s life or safety.

4. When and with whom do we share your personal information?

We share personal information only with:

• Stripe, which takes payments, manages subscriptions and sends invoices.
• Cloudflare, which hosts the licence server and its storage.
• Microsoft, which runs Azure DevOps and the Visual Studio Marketplace. Microsoft processes your use of Azure DevOps under its own privacy statement, not under this notice.
• GitHub, which hosts this website and may log the IP address of each visit.

Stripe, Cloudflare and GitHub may process information in the United States and other countries outside the UK and the EEA. They do so under safeguards such as the standard contractual clauses or the UK International Data Transfer Addendum.

We may also share or transfer your information during the negotiation or completion of a merger, a sale of company assets, a financing, or the acquisition of all or part of our business by another company.

5. How long do we keep your information?

• A user ID is deleted from the licence server once the user has not opened the extension for 30 days, the next time the server updates the seats of that organisation. All the user IDs of an organisation are deleted 180 days after the last time one of its users opened the extension, for example when its licence ends.
• The details of your subscription and invoices are kept as long as you have a licence, and then for as long as tax and accounting law requires.
• Emails are kept for as long as we need them to answer you and to support the licence.

When we no longer need your personal information, we delete or anonymise it. If that is not possible, for example because it is in a backup, we store it securely and keep it from any further processing until it can be deleted.

6. How do we keep your information safe?

The licence server accepts only Azure DevOps identifiers, keeps the key to Stripe as a secret and talks to the extension over HTTPS. We collect as little information as the licence needs.

No transmission over the internet and no storage can be guaranteed to be 100% secure. We cannot promise that hackers or other unauthorised third parties will never defeat our security. You should use the Services only from a secure environment.

7. Do we collect information from minors?

The Services are made for businesses. We do not knowingly collect information from, or market to, children under 18. If we learn that we have collected information from a child under 18, we will delete it promptly. If you think we have, please email privacy@pywrtools.dev.

8. What are your privacy rights?

In some regions, such as the UK, the European Economic Area (EEA) and Switzerland, you have the right to:

• ask for access to, and a copy of, your personal information;
• ask for it to be corrected or deleted;
• restrict its processing;
• receive it in a portable format, where this applies;
• object to its processing;
• not be subject to automated decision-making.

To make a request, email privacy@pywrtools.dev. We will act on it as the applicable data protection laws require.

Because the extension sends us only Azure DevOps identifiers, we may ask for your user ID or the ID of your organisation to find your information. The ID of the organisation is shown on the Model reviews page, next to Buy a licence.

Complaints

If you are unhappy with how we have handled your personal information, you can complain to us at privacy@pywrtools.dev. We will:

• acknowledge your complaint within 30 days;
• investigate without undue delay;
• keep you informed of progress and explain the outcome.

If you are not satisfied with our answer, you can complain to the Information Commissioner’s Office (ICO), the UK supervisory authority:

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

In the EEA, you can also complain to the data protection authority of your country. In Switzerland, you can contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent

Where we rely on your consent, you can withdraw it at any time by emailing privacy@pywrtools.dev. This does not affect processing that took place before you withdrew it, or processing that relies on another legal basis.

Emails about the Services

You can stop receiving news about the Services at any time by replying to the email or by contacting us. We may still email you about your licence, your invoices and your support requests.

9. Do-not-track signals

Some browsers can send a do-not-track (“DNT”) signal. There is no agreed standard for how to respond to it, so we do not currently respond to it. This website does not use cookies or analytics, and neither extension tracks your activity.

10. Do we update this notice?

We update this notice when the Services or the law change. The date at the top shows the last update. When we make an important change, we will say so on this website or email the customers it affects.

11. How can you contact us?

Pywr Tools is run by Stefano Simoncelli, who controls the personal information described in this notice. Email privacy@pywrtools.dev.

12. How can you review, update or delete your information?

You can ask to see the personal information we hold about you, how we have processed it, to correct it or to delete it. Some of these rights may be limited by law, for example when we must keep an invoice. To make a request, email privacy@pywrtools.dev.