DRAFT — this text is under legal review and not yet binding.

Privacy Policy

SerOps ("we") operates Verestore. This policy explains what personal data we process as a controller (about our visitors and customers). For data inside the backups you connect, we act as a processor under the Data Processing Agreement.

Data we collect

Data Purpose Legal basis
E-mail address, name, organisation memberships Account, sign-in by e-mail link or Google/GitHub, invitations Contract
Target configuration (bucket endpoint, prefix), schedules, checks Providing the Service Contract
Run results, reports, evidence packs, audit log Providing the Service, security, your audit evidence Contract, legitimate interest
Free restore check: e-mail address, IP address, the uploaded dump Running the check, sending the report, preventing abuse (rate limits) Your request; legitimate interest (abuse prevention)
Billing data Handled by Paddle as merchant of record; we receive the plan, status and a customer reference Contract
Website analytics Cloudflare Web Analytics, cookieless, aggregated visit statistics, no personal profile Legitimate interest
Error reports Technical diagnostics (Sentry, if enabled), scrubbed of secrets Legitimate interest

We don't use cookies on our public website. The application uses a strictly necessary session cookie after you sign in.

Retention

  • Account data: for the life of the account, then deleted within 30 days.
  • Free restore check: the uploaded dump is deleted when the run ends, at most 24 hours after upload. The e-mail address and IP address are kept 30 days for abuse prevention.
  • Billing records: kept by Paddle, and by us as required by law.

Sharing

We use the sub-processors listed here. We don't sell personal data.

Transfers

Our infrastructure is in the EU (Scaleway, Paris). Some sub-processors (e.g. Cloudflare) may process data outside the EU, under Standard Contractual Clauses.

Your rights

You can access, correct, export or delete your personal data, object to processing based on legitimate interest, and complain to your data-protection authority. Contact support@verestore.dev.

Last updated 2026-11-04 (draft)