Privacy

Privacy policy

DRAFT — this text is a template to be completed and reviewed by a legal advisor before use. Fields in square brackets must be replaced with the controller's real details.

This notice describes how [COMPANY NAME] processes personal data collected through the koapanel.app website, the console.koapanel.app checkout and the Koapanel panels that communicate with our servers, under Regulation (EU) 2016/679 (GDPR).

Data controller

[COMPANY NAME], VAT [VAT NUMBER], registered office at [ADDRESS]. Email: [PRIVACY EMAIL].

What data we process

  • Contact and installer request forms: name, email, country and, if you provide them, company, VAT number, website and message content.
  • Purchases: customer and billing details, plan and period purchased. Payment data is processed directly by the payment provider [e.g. Stripe]; we never see or store card numbers.
  • Licenses and updates: the installed panel sends our servers the license code, a random server identifier, host name, IP address and version, to activate the license, check its status once a day and deliver updates.
  • Support: requests sent from the panel or the forms, with any attachments.
  • Technical data: web servers log IP address, date and time, requested page and browser (technical logs) for security and operation, kept for [PERIOD, e.g. 14 days].

Purposes and legal bases

  • Answering requests and providing quotes: pre-contractual measures requested by you (Art. 6.1.b).
  • Selling, activating and managing licenses, providing updates and support: performance of a contract (Art. 6.1.b).
  • Tax and accounting obligations: legal obligation (Art. 6.1.c).
  • Service security and abuse prevention (for example using the same license on several servers): legitimate interest (Art. 6.1.f).

Cookies and analytics

The koapanel.app website does not use cookies for profiling, nor third-party analytics or tracking tools. See the cookie notice.

Recipients

Data is processed by authorized staff and by providers acting as processors: server hosting [e.g. Vultr — server location], email delivery [provider], payments [e.g. Stripe], accountants. [State any transfers outside the EEA and the safeguards used].

Retention

Contact requests: [e.g. 24 months]. Customer, order and license data: for the duration of the relationship and then [e.g. 10 years] for tax obligations. Technical logs: [PERIOD].

Your rights

You can request access, rectification, erasure, restriction, portability and object to processing by writing to [PRIVACY EMAIL]. You may also lodge a complaint with your data protection authority (in Italy: Garante per la protezione dei dati personali).

Last updated: [DATE]