Last updated: April 7, 2026
Data Controller
The Bulgarian Commission for Personal Data Protection (CPDP) is the supervisory authority responsible for overseeing data protection compliance in Bulgaria. You may contact them at www.cpdp.bg.
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, submit a contact form, subscribe to our newsletter, or communicate with us. This may include:
- Name and email address
- Company name and role
- Messages and feedback you send us
- Account credentials (securely hashed)
We also collect technical information automatically when you use our platform, including server metadata (hostnames, IP addresses, operating system versions) necessary to provide our monitoring and security services.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our security auditing and monitoring services
- Send you alerts, notifications, and service updates
- Respond to your requests and support inquiries
- Analyze usage patterns to improve the platform
- Comply with legal obligations
3. Data Security
We implement industry-standard security measures to protect your data. All communications use TLS 1.3 encryption. Authentication tokens use constant-time comparison to prevent timing attacks. Server data is strictly isolated between organizations - no cross-tenant access is possible.
4. Data Retention
We retain your account data for as long as your account is active. Monitoring data is retained according to your plan's retention period. You may request deletion of your data at any time by contacting us.
5. Third-Party Services
We use a limited number of third-party services to operate our platform. We do not sell, rent, or share your personal information with third parties for marketing purposes. Vulnerability data is queried against public databases (OSV.dev) using only package names and versions - no personally identifiable information is transmitted.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Export your data in a portable format
7. Cookies
We use essential cookies required for authentication and session management. We do not use third-party tracking cookies or advertising cookies. Analytics, when enabled, use privacy-friendly, cookie-free methods.
8. Contact Us
If you have questions about this privacy policy or wish to exercise your data rights, please contact us at privacy@optimux.io.