Skip to content

Privacy Policy

Last Updated: July 10, 2026

Effective Date: July 10, 2026

Who We Are

Alchim312 operates the CDviz commercial services — the managed offer and the self-hosted offer, whatever their current commercial names (as of this writing, "CDviz Cloud" and "CDviz Pro") — and the websites cdviz.dev, app.cdviz.dev, and demo.cdviz.dev. This policy covers these services and websites. The open-source CDviz Community edition, when self-hosted by you, operates independently and is not covered.

Contact us: [email protected]

What Information We Collect

When you create an account:

  • Name, email, company information
  • Username and encrypted password
  • Billing information for subscriptions

When you use our service:

  • Your SDLC monitoring data and project configurations
  • Technical data (IP address, browser type, usage patterns)
  • Cookies for authentication and functionality

Our analytics are cookieless and anonymized: no analytics cookies are set and no personal profile is built, so no consent is requested.

Demo environment: data submitted to demo.cdviz.dev is for evaluation only and may be reset or deleted at any time without notice.

How We Use Your Information

  • Provide the service: Authentication, billing, support, and features
  • Improve our service: Analyze usage patterns and fix issues
  • Communicate: Service updates, support responses, and marketing (with consent)
  • Legal compliance: When required by law

We process your data based on:

  • Contract: Account, billing, and service delivery
  • Legitimate interest: Service security, improvement, and support
  • Legitimate interest (continued): Anonymized, cookieless analytics
  • Consent: Marketing communications
  • Legal obligation: Billing records and lawful requests

Who We Share Data With

Service providers we trust:

  • Neon: Database (EU servers)
  • Creem: Payment processing (PCI DSS compliant)
  • Hostinger: Server hosting (EU servers)
  • Cloudflare: CDN, DNS, SSL/TLS, network and additional storage (EU/US servers)
  • Google: email (EU/US servers)
  • PostHog: Anonymized, cookieless product analytics (EU servers)

Authentication is handled directly by our own application — no third-party identity provider.

Legal requirements: We may share data when required by law or to protect rights.

Your Rights

You can:

  • Access your data or request a copy
  • Correct inaccurate information
  • Delete your account and data
  • Port your data to another service (structured, machine-readable format)
  • Restrict or object to certain processing
  • Opt-out of marketing communications
  • Control cookies through your browser

To exercise these rights: Contact [email protected]

Data Retention

  • Account data: Until you delete your account or 3 years of inactivity
  • Billing records: 7 years (legal requirement)
  • Support communications: 3 years

Security

We protect your data with:

  • Encryption for data in transit and at rest
  • Regular security assessments
  • Immediate response to security issues

Cookies

  • Essential cookies: Required for login and security
  • Preference cookies: Remember your settings

We set no analytics or advertising cookies. Manage cookies through your browser settings.

Children's Privacy

Our services are not for anyone under 16 years of age. We don't knowingly collect data from children.

International Transfers

Some data may be processed outside the EU. We ensure protection through standard contractual clauses and other legal safeguards.

Changes to This Policy

We'll notify you 30 days before any major changes via email or website notice.

Questions or Complaints

Contact us: [email protected] (we respond within 30 days)

EU residents: You can also contact your national Data Protection Authority if you have concerns.


By using our commercial services or websites, you agree to this Privacy Policy.