Privacy Policy
Last Updated: July 10, 2026
Effective Date: July 10, 2026
Who We Are
Alchim312 operates the CDviz commercial services — the managed offer and the self-hosted offer, whatever their current commercial names (as of this writing, "CDviz Cloud" and "CDviz Pro") — and the websites cdviz.dev, app.cdviz.dev, and demo.cdviz.dev. This policy covers these services and websites. The open-source CDviz Community edition, when self-hosted by you, operates independently and is not covered.
Contact us: [email protected]
What Information We Collect
When you create an account:
- Name, email, company information
- Username and encrypted password
- Billing information for subscriptions
When you use our service:
- Your SDLC monitoring data and project configurations
- Technical data (IP address, browser type, usage patterns)
- Cookies for authentication and functionality
Our analytics are cookieless and anonymized: no analytics cookies are set and no personal profile is built, so no consent is requested.
Demo environment: data submitted to demo.cdviz.dev is for evaluation only and may be reset or deleted at any time without notice.
How We Use Your Information
- Provide the service: Authentication, billing, support, and features
- Improve our service: Analyze usage patterns and fix issues
- Communicate: Service updates, support responses, and marketing (with consent)
- Legal compliance: When required by law
Legal Bases (GDPR)
We process your data based on:
- Contract: Account, billing, and service delivery
- Legitimate interest: Service security, improvement, and support
- Legitimate interest (continued): Anonymized, cookieless analytics
- Consent: Marketing communications
- Legal obligation: Billing records and lawful requests
Who We Share Data With
Service providers we trust:
- Neon: Database (EU servers)
- Creem: Payment processing (PCI DSS compliant)
- Hostinger: Server hosting (EU servers)
- Cloudflare: CDN, DNS, SSL/TLS, network and additional storage (EU/US servers)
- Google: email (EU/US servers)
- PostHog: Anonymized, cookieless product analytics (EU servers)
Authentication is handled directly by our own application — no third-party identity provider.
Legal requirements: We may share data when required by law or to protect rights.
Your Rights
You can:
- Access your data or request a copy
- Correct inaccurate information
- Delete your account and data
- Port your data to another service (structured, machine-readable format)
- Restrict or object to certain processing
- Opt-out of marketing communications
- Control cookies through your browser
To exercise these rights: Contact [email protected]
Data Retention
- Account data: Until you delete your account or 3 years of inactivity
- Billing records: 7 years (legal requirement)
- Support communications: 3 years
Security
We protect your data with:
- Encryption for data in transit and at rest
- Regular security assessments
- Immediate response to security issues
Cookies
- Essential cookies: Required for login and security
- Preference cookies: Remember your settings
We set no analytics or advertising cookies. Manage cookies through your browser settings.
Children's Privacy
Our services are not for anyone under 16 years of age. We don't knowingly collect data from children.
International Transfers
Some data may be processed outside the EU. We ensure protection through standard contractual clauses and other legal safeguards.
Changes to This Policy
We'll notify you 30 days before any major changes via email or website notice.
Questions or Complaints
Contact us: [email protected] (we respond within 30 days)
EU residents: You can also contact your national Data Protection Authority if you have concerns.
By using our commercial services or websites, you agree to this Privacy Policy.