Privacy

Plain-English privacy.

No dark patterns. No surprise data brokers. Below is what we collect, why, how long, and how to opt out — written by humans, not lawyers.

Last updated: 2026-05-26

Who we are

Data controller.

Protoxol Systems S.L., a Spanish entity headquartered in Madrid. For privacy inquiries, write to [email protected].

What we collect

Only what the service needs.

Account data. Email and name when you sign up. Used to log you in and contact you.
Telemetry from your environment. Security events you send us — processed under our DPA and your contract.
Analytics. Anonymous page views via Plausible (no cookies, no IP tracking).
Server logs. Access logs retained 30 days for security and operations. Then deleted.

What we don't

No tracking, no selling.

We do not sell or rent personal data to anyone.
We do not run cross-site advertising trackers.
We do not fingerprint browsers.
We do not share customer telemetry with third parties beyond strictly necessary subprocessors (listed in the DPA).

Your rights

GDPR + your control.

Under EU law you can request access, rectification, erasure, restriction, portability or objection. Email [email protected]. We respond within 30 days — usually within five.

Strictly technical.

The marketing site uses no marketing cookies. The app uses a single session cookie required to keep you logged in. We do not display a cookie banner because we do not place non-essential cookies.

Retention

How long we keep things.

Account data: while your account is active, plus 30 days after deletion. Customer telemetry: as per your retention tier (default 30/90/365 days). Server logs: 30 days. Backups: 35 days, encrypted.