Privacy notice
Controller: Georgios Stavropoulos, Tzon Kennenti 25A, 55535 Pylaia, Greece — [email protected].
What we collect and why
- Waitlist: your email address, whether you would pre-pay, your answers to the scope checker and the page that referred you. Purpose: to tell you when Pinwatch opens and to understand demand. Legal basis: your consent, which you can withdraw at any time.
- Customers (when the paid plan opens): account email, products and SBOMs you upload, incident records you create. Purpose: providing the service. Legal basis: contract.
- Payments: handled by Paddle.com as Merchant of Record and an independent controller for payment data; we receive your name, email, country and subscription status, never your card details.
What we do not do
No analytics trackers, no advertising cookies, no selling of data. The scope checker stores your answers only in your own browser (local storage) so the waitlist form can include them if you sign up. Your IP address is used briefly in memory to prevent abuse and is not stored.
Processors and location
Cloudflare (website delivery and secure tunnel), our own server in Greece (waitlist and service data), Paddle (payments), Apple iCloud Mail (email correspondence). Where a provider transfers data outside the EEA, it relies on the EU standard contractual clauses or an adequacy decision.
Retention
Waitlist entries: until you ask us to remove them, or 12 months after the paid plan opens if you do not become a customer. Customer data: for the life of the account plus 30 days; invoices as required by Greek tax law.
Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing by writing to [email protected]. You can complain to the Hellenic Data Protection Authority (dpa.gr).