Privacy policy
Draft. This policy is a starting point for review by Sharkbyte Corp and its legal counsel, and is not in force until published without this notice.
Controller
Sharkbyte Corp, which you can reach through the contact form.
What we collect
- Contact form. The name, email address, company and message you send us, which we keep in our mailbox to answer you and for our records of the conversation. The server also keeps the sender's IP address for one hour, to limit abuse of the form.
- Purchases. Licenses and hosted plans are bought through Link, the merchant of record service of Stripe, whose checkout collects your name, email address, billing details and payment method under its own privacy policy. Sharkbyte sees your name, email address, country and order, to provide the license or the plan and to support you.
- License checks. An installed Sharkhex Spaces contacts Sharkbyte's license service once a day with its license key, its install id and its domain, so that one key runs on one server at a time. Nothing else leaves your server.
- Hosted platforms. On a hosted Sharkhex Spaces platform, Sharkbyte processes the data of the platform's users on behalf of the client who runs the platform, who is its controller. Questions about that data go to that client first.
- Server logs. The web server keeps standard access logs, with IP addresses, for 14 days, to operate and secure the website.
We set no analytics or advertising cookies, and the website stores nothing in your browser.
Legal bases
Answering your enquiry and providing the license or the plan are performance of a contract or steps before one. Limiting abuse and keeping logs are our legitimate interest in running a secure website.
Recipients
Stripe (payments, through Link), Mailgun (delivery of email), Amazon Web Services (hosting of the website and of hosted platforms) and Cloudflare (domain names). Data may be processed outside the European Economic Area under standard contractual clauses.
Your rights
You may ask for access to, correction or deletion of your data, object to its processing, or ask for it to be handed over, by writing to us through the contact form. You may also complain to the Romanian data protection authority, ANSPDCP.
Retention
Enquiries are kept as long as the conversation is useful and at most three years. Order records are kept as long as tax law requires.