Privacy policy

What changed since edition 1

28 lines added, 11 removed

1. −Removed: This policy explains how Hermetica, provided by Shin Bet Solutions ("we"), handles personal data. For your own account we are the controller. For the contacts you put into Hermetica and message through it, you are the controller and we act as your processor.
2. +Added: We collect what running your account needs: who you are, your workspace content, the keys of the providers you connect, and usage and security logs.
3. +Added: For the contacts you message through Hermeticor, you decide and we process on your behalf.
4. +Added: We never sell personal data or use customer data to train models.
5. +Added: Provider keys are encrypted, card details stay with Stripe, and you can access, export or delete your data at any time.
6. +Added: This policy explains how Hermeticor, provided by Shin Bet Solutions ("we"), handles personal data. For your own account we are the controller. For the contacts you put into Hermeticor and message through it, you are the controller and we act as your processor.
7. What we collect
8. Account data: your name, email address, workspace memberships and roles. Your password, second factors and sign-in sessions are held by Atlas (below).
9. ⋯
10. To provide and secure the service, to send the messages you ask for through your providers, to enforce consent and suppression, to bill you, to support you, and to improve the product in aggregate. We do not sell personal data and do not use customer data to train models.
11. Sub-processors
12. −Removed: We use these providers as processors, each only for the purpose below:
13. −Removed: Atlas (atlasauth.net) runs sign-in, accounts and sessions. It holds your email, name, password hash, second factors, sessions, and the IP address and browser of each sign-in.
14. −Removed: Cookie Munch (cookiemunch.net) shows the cookie banner, records your choices, and receives and routes privacy requests about your Hermetica account.
15. −Removed: Forumulate (forumulate.com) hosts these pages: guides, API reference, legal pages, blog, community, status page and changelog. If you sign in to the community with your Hermetica account, Forumulate holds your name, email and posts. Closing your account removes you there.
16. −Removed: Chatly (chatlychat.com) provides support chat. It loads only when you open it. If you are signed in it receives your name and email; it holds your messages and the page you were on.
17. −Removed: Referalli (referalli.com) runs the referral program for Hermetica subscriptions, and only if you accept the "marketing" cookie category. It holds your account id, the referral code you arrived with and, if you subscribe, the credit that earned.
18. −Removed: Seolyticize (seolyticize.com) counts page views on our public pages only, never inside the app, and only if you accept the "statistics" cookie category. It sets no cookies; addresses are sent without their query string.
19. −Removed: Stripe (stripe.com) processes payments and subscriptions. It receives your billing details and the usage we report for billing, not your contacts or messages.
20. −Removed: Hosting. Hermetica runs on a virtual server operated by our hosting provider and managed with Coolify. It stores the database, uploaded files and backups.
21. +Added: We use these providers as processors, each only for the purpose listed. The table is kept current by Forumulate from the services connected to these pages plus the ones we list, and each change is announced at least 30 days before it takes effect.
22. +Added: Your sending providers
23. The sending providers you connect (for example Amazon SES, SendGrid, Twilio) receive what is needed to deliver your messages. They are your own providers under your own agreements with them, not our sub-processors.
24. Retention
25. Account data is kept while your account exists. Workspace data is kept until you delete it or the workspace; consent and suppression records are kept as long as the law needs them as proof. When a workspace is deleted, its data is erased after a grace period.
26. Your rights
27. −Removed: Depending on where you live you may access, correct, export, restrict or delete your personal data, and object to processing. Use the "Your privacy rights" form linked in the app footer; it reaches every system we use. If you are a contact of a Hermetica customer, ask that customer first; we will help them answer you.
28. +Added: Depending on where you live you may access, correct, export, restrict or delete your personal data, and object to processing. Use the "Your privacy rights" form linked in the app footer; it reaches every system we use. If you are a contact of a Hermeticor customer, ask that customer first; we will help them answer you.
29. Changes
30. We announce material changes at least 30 days in advance. Questions: ask in the community or use the support chat in the app.
31. +Added: Entity
32. +Added: Purpose
33. +Added: Cookie Munch
34. +Added: Cookie consent and privacy requests: your consent choices (with a random visitor id) and, when you file a request, the email address it concerns.
35. +Added: Atlas
36. +Added: Sign-in, accounts and sessions: your email, name, password hash, second factors, sessions, and the IP address and browser of each sign-in.
37. +Added: Forumulate
38. +Added: Hosts these pages (guides, API reference, legal, blog, community, status, changelog). If you sign in to the community it holds your name, email and posts; closing your account removes you.
39. +Added: Chatly
40. +Added: Support chat, loaded only when you open it. If you are signed in it receives your name and email; it holds your messages and the page you were on.
41. +Added: Referalli
42. +Added: The referral program for Hermeticor subscriptions, only with the marketing cookie category: your account id, the referral code you arrived with and any credit earned.
43. +Added: Seolyticize
44. +Added: Page-view counts on our public pages only, never inside the app, only with the statistics cookie category. No cookies; addresses are sent without their query string.
45. +Added: Watchtower
46. +Added: Error and performance monitoring of Hermeticor, on our own servers: server traces and logs with emails, numbers and message content removed; browser timings only with statistics consent.
47. +Added: Stripe
48. +Added: Payments and subscriptions: your billing details and the usage we report for billing, not your contacts or messages.
49. +Added: Hosting provider
50. +Added: The virtual server Hermeticor runs on (managed with Coolify): the database, uploaded files and backups.