Privacy Policy

SerOps ("we") operates Verestore. This policy explains what personal data we process as a controller (about our visitors and customers). For data inside the backups you connect, we act as a processor under the Data Processing Agreement.

Data we collect

Data	Purpose	Legal basis
E-mail address, name, organisation memberships	Account, sign-in by e-mail link or Google/GitHub, invitations	Contract
Target configuration (bucket endpoint, prefix), schedules, checks	Providing the Service	Contract
Run results, reports, evidence packs, audit log	Providing the Service, security, your audit evidence	Contract, legitimate interest
Free restore check: e-mail address, IP address, the uploaded dump	Running the check, sending the report, preventing abuse (rate limits)	Your request; legitimate interest (abuse prevention)
Billing data	Handled by Paddle as merchant of record; we receive the plan, status and a customer reference	Contract
Website analytics	Cloudflare Web Analytics, cookieless, aggregated visit statistics, no personal profile	Legitimate interest
Error reports	Technical diagnostics (Sentry, if enabled), scrubbed of secrets	Legitimate interest

We don't use cookies on our public website. The application uses a strictly necessary session cookie after you sign in.

Retention

• Account data: for the life of the account, then deleted within 30 days.
• Free restore check: the uploaded dump is deleted when the run ends, at most 24 hours after upload. The e-mail address and IP address are kept 30 days for abuse prevention.
• Billing records: kept by Paddle, and by us as required by law.

Sharing

We use the sub-processors listed here. We don't sell personal data.

Transfers

Our infrastructure is in the EU (Scaleway, Paris). Some sub-processors (e.g. Cloudflare) may process data outside the EU, under Standard Contractual Clauses.

Your rights

You can access, correct, export or delete your personal data, object to processing based on legitimate interest, and complain to your data-protection authority. Contact [email protected].