Privacy Policy

Last updated: June 26, 2025

SHiS is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how you can control it.

1. Information we collect

We collect information you provide directly when you create an account, use our services, or contact us. This includes: • Account information: name, email address, company name, and role. • Usage data: actions taken within the platform (tickets created, sessions started, reports viewed), stored in our audit logs. • Technical data: IP address, browser type, device type, and cookies used to maintain your session. • Payment information: processed by our payment provider (Stripe). We do not store card numbers.

2. How we use your information

We use the information we collect to: • Provide, maintain, and improve the SHiS platform. • Send transactional emails (account confirmation, password reset, ticket notifications). • Monitor and ensure platform security and detect abuse. • Comply with legal obligations. We do not sell your personal data to third parties. We do not use your data to train AI models without explicit consent.

3. Data storage and retention

Your data is stored in Turso (distributed LibSQL) with primary nodes in the EU. Data is encrypted at rest using AES-256 and in transit using TLS 1.3. We retain account data for the duration of your subscription plus 90 days after cancellation, after which it is permanently deleted upon request. Audit logs are retained for 12 months.

4. Sharing with third parties

We share data with third-party services only as necessary to operate the platform: • Cloudflare: infrastructure and DDoS protection (data transits their network). • Stripe: payment processing. • Resend / SendGrid: transactional email delivery. All sub-processors are GDPR-compliant and bound by data processing agreements.

5. Your rights (GDPR)

If you are in the European Economic Area, you have the following rights: • Right of access: request a copy of your personal data. • Right of rectification: correct inaccurate data. • Right to erasure: request deletion of your data. • Right to portability: export your data in a machine-readable format. • Right to object: opt out of certain processing activities. To exercise any of these rights, email privacy@s-his.com. We respond within 30 days.

6. Cookies

We use a minimal set of cookies: • Session cookie: keeps you logged in. Expires when you close your browser or after 30 days. • Preference cookie: stores your theme (light/dark) and language preference. We do not use advertising cookies or third-party tracking pixels. See our Cookie Policy for details.

7. Changes to this policy

We may update this policy to reflect product changes or legal requirements. We will notify you by email at least 14 days before any material change takes effect. The date of the latest revision is shown below.

8. Contact

For privacy questions or to exercise your rights: Email: privacy@s-his.com Address: SHiS Technologies, [Registered Address]