Privacy Policy

1. Key Terms

As the creator of Sama Deploy, I want to ensure this privacy policy is clear and transparent. To help you understand how I handle your data in accordance with GDPR requirements, let me explain some important terms I'll be using throughout this document:

• Personal Data: This refers to any information about you that I might collect while you use Sama Deploy - things like your email address when you purchase a license, or your IP address when you visit the website.
• Data Subject: That's you - the person using Sama Deploy whose personal data I might need to process to provide you with the service.
• Processing: Any way that I handle your data while providing Sama Deploy's services - whether that's storing your email address for license management, or using it to send you important updates about your purchase.
• Controller: That's me, Cengiz Gürtusgil, as I'm the one responsible for deciding how your personal data is handled within Sama Deploy.
• Processor: Any service or tool I use to help run Sama Deploy that might handle your data on my behalf (like Stripe for processing payments).
• Consent: Your clear permission for me to use your data in specific ways - I'll always ask before doing anything with your information that isn't strictly necessary for providing Sama Deploy's services.

2. Name and Address of the Controller

The "controller" (the party responsible under GDPR and other data protection laws) is:

Name: Cengiz Gürtusgil
VAT ID: DE304557874
Product: Sama Deploy
Email: [email protected]

3. Data Collection for Sama Deploy

As the developer of Sama Deploy, I (Cengiz Gürtusgil) collect only essential data required to provide you with your Sama Deploy license and ensure smooth operation:

• Your email address that you provide during purchase
• A unique license token I generate for your Sama Deploy instance
• Payment session identifiers from Stripe
• The current status of your license (such as active or expired)
• Installation count to manage your license usage
• Records of when I sent you important communications like welcome emails and license information
• Timestamps related to your license creation and management

For handling payments securely, I partner with Stripe. I never see or store your payment details directly - this sensitive information is handled entirely by Stripe according to their privacy standards.

To ensure Sama Deploy runs reliably and securely, I use Cloudflarefor DNS and security protection, with servers located in Germany (hosted by Hetzner). These trusted partners may process basic technical information like IP addresses as part of their security and operational functions.

4. How I Use Your Data

As the developer of Sama Deploy, I (Cengiz Gürtusgil) process your personal data for these specific purposes:

• Managing Your Sama Deploy License:
  • Setting up and maintaining your personal license
  • Checking that your license is valid when you use Sama Deploy
• Staying in Touch:
  • Getting you started with your welcome message and license details
  • Being there when you need help or have questions about Sama Deploy
• Handling Your Payment:
  • Processing your payment safely using my payment partner Stripe
• Meeting My Legal Duties:
  • Following German tax and business regulations

I want to be clear: I don't use your information for marketing, and I only share what's absolutely necessary with Stripe (for payments) and Cloudflare (for keeping Sama Deploy secure and running smoothly). Your privacy is important to me.

5. Legal Basis for Processing

As the developer of Sama Deploy, I process your data based on these GDPR legal grounds:

• Art. 6(1)(b) GDPR - Contract Performance:

  I need to process certain data to provide you with your Sama Deploy license and deliver the service you purchased from me.

• Art. 6(1)(f) GDPR - Legitimate Interests:

  I collect basic usage data to improve Sama Deploy and maintain its security. I've carefully balanced this against your privacy rights and only collect what's truly necessary.

• Art. 6(1)(c) GDPR - Legal Requirements:

  As a business owner in Germany, I'm required to keep certain records for tax and accounting purposes.

In situations where I need to process your data for purposes not covered above, I'll always ask for your explicit consent first, as required by Art. 6(1)(a) GDPR.

6. Data Retention and Erasure

I, Cengiz Gürtusgil, keep your personal information only as long as needed to provide you with Sama Deploy services and meet my legal obligations as a German business owner. When your data is no longer needed, I'll either delete it or make it anonymous. If you ask me to delete your data, I'll do so promptly unless I'm legally required to keep certain records.

7. Data Transfers and Hosting

I host Sama Deploy's data on secure servers located in Germany through Hetzner. As the developer, I take data protection seriously - if I ever need to transfer your personal data outside the European Economic Area (EEA), I will implement appropriate safeguards like standard contractual clauses to keep your information protected. For payment processing, I work with Stripe who may process data in the US or other locations, but they maintain strong data protection standards that meet EU requirements.

8. Your Rights Under GDPR

As a Sama Deploy user, you have important rights regarding how I handle your personal data:

• Access Your Data: You can ask me what information I have about you
• Fix Your Data: If something's wrong or incomplete, let me know and I'll correct it
• Delete Your Data: Request removal of your information when I no longer need it
• Limit Processing: You can ask me to temporarily stop using your data in certain ways
• Take Your Data: Get your information in a format you can use elsewhere
• Raise Concerns: Tell me if you object to how I'm using your data
• Control Consent: Change your mind about any permissions you've given me

I want to make it easy for you to exercise these rights - just email me at [email protected] and I'll help you out.

9. Security Measures

I take the security of your personal data seriously and have put robust technical and organizational safeguards in place to protect it within Sama Deploy. While I use industry-standard security practices, I want to be transparent that no online data transmission is completely secure. If you have sensitive information to share, I'm happy to accommodate alternative communication methods.

10. Use of Cookies

For Sama Deploy to work optimally, I use essential cookies for session management and security. You'll always see a clear notice when cookies are being used. While you can adjust cookie settings in your browser, please note this may impact how some features of Sama Deploy function.

11. Automated Decision-Making and Profiling

I want to be clear that Sama Deploy does not employ any automated decision-making or user profiling systems. All important decisions about your account and data are made with human oversight.

12. Changes to this Privacy Policy

As Sama Deploy evolves, I may need to update this privacy policy. When I make significant changes, I'll make sure to inform you directly via email or through a notification when you log into Sama Deploy.

13. Contact Information

If you have any questions or concerns about how I handle your data at Sama Deploy, please don't hesitate to reach out to me:
Cengiz Gürtusgil
Email: [email protected]

I, Cengiz Gürtusgil, want to be transparent that this Privacy Policy takes effect on the date listed below. When you continue using Sama Deploy or purchase a license after I make any changes, you're agreeing to the updated terms of this Privacy Policy.

Last Updated: December 28, 2024