Privacy Policy
1. Data Controller
DMC srl
Rue Tavienne 128
5620 Morville, Belgium
VAT: BE 0812 398 655
Email: info@deployator.com
2. Personal Data We Collect
- Account information: name, email address, and company name provided during registration.
- Authentication data: hashed passwords and JWT tokens used to secure your session.
- Technical data: IP address, user agent, browser type, and login timestamps.
- Salesforce data: encrypted OAuth credentials and metadata deployment records relating to your connected orgs.
- Usage data: deployment history, audit logs, and activity records generated during your use of the platform.
3. Legal Bases for Processing
| Purpose | Legal Basis |
|---|---|
| Account creation | Contractual necessity |
| Executing deployments | Contractual necessity |
| Security logging | Legitimate interest |
| Login history and fraud prevention | Legitimate interest |
| Marketing communications | Consent |
4. Data Retention
- Login history: retained for 30 days.
- Audit logs: retained for the duration of the service agreement.
- Account data: retained until you request deletion of your account.
- Deployment records: retained for the duration of the service agreement; anonymised upon account deletion.
5. Data Sharing and Sub-Processors
We may share your data with the following categories of sub-processors:
- Hosting provider (EU): infrastructure and storage services located within the European Union.
- SMTP provider: transactional email delivery for notifications and account communications.
- Google reCAPTCHA: bot protection on sign-in and sign-up forms.
6. Your Rights
Under the GDPR, you have the following rights with respect to your personal data:
- Right of access (Art. 15): you may request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): you may request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): you may request deletion of your personal data in certain circumstances.
- Right to data portability (Art. 20): you may request a machine-readable copy of your data to transfer to another service.
- Right to restriction of processing (Art. 18): you may request that we limit how we use your data in certain circumstances.
- Right to object (Art. 21): you may object to processing based on legitimate interests.
To exercise any of these rights, please contact us at info@deployator.com. We will respond within 30 days.
7. Data Protection Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA):
Autorité de Protection des Données / Gegevensbeschermingsautoriteit (APD/GBA)
Rue de la Presse 35
1000 Brussels, Belgium
www.autoriteprotectiondonnees.be
8. Data Security
We implement the following technical and organisational security measures to protect your personal data:
- Encryption of data at rest using industry-standard algorithms.
- JWT-based session management and OAuth 2.0 for Salesforce authentication.
- Role-Based Access Control (RBAC) to enforce the principle of least privilege.
- Comprehensive audit logging of all platform actions.
- Regular security reviews and vulnerability assessments.
9. Data Processing Agreements
A Data Processing Agreement (DPA) is available for B2B clients upon request. Please contact info@deployator.com for more information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email using the address associated with your account. The date at the top of this page reflects when the policy was last updated.