Privacy Policy

1. Who We Are

Alkas LLC operates Axiologic, a managed hosting and DevOps services provider at axiologic.online. Axiologic is our consumer brand. For data protection purposes, Alkas LLC is the data controller. You can contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Account data: name and email address provided during sign-up.
• Billing data: payment details are processed by Stripe and never stored on our servers. We receive only a billing reference and subscription status from Stripe.
• Service data: technical information needed to provision and manage your services (e.g. domain names, Git repository URLs, environment variable names — not values).
• Support data: messages you send us via email or contact forms.
• Usage data: basic logs (IP address, timestamp, request path) retained for security and debugging purposes.
• Cookies: we use a single session cookie for authentication. We do not use tracking or advertising cookies.

3. How We Use Your Data

• To create and manage your account and subscription
• To provision and operate the services you have purchased
• To process payments and send billing notifications
• To respond to support requests
• To send service-related notifications (downtime alerts, renewal reminders)
• To comply with legal obligations

We do not use your data for advertising, profiling, or sell it to any third party.

4. Legal Basis for Processing

We process your data on the following legal bases under GDPR:

• Contract performance — to deliver the services you have subscribed to.
• Legitimate interests — for security logging, fraud prevention, and service improvement.
• Legal obligation — where required by applicable law.

5. Third-Party Processors

We share your data only with trusted third-party processors necessary to operate our services:

SCCs = Standard Contractual Clauses (EU-approved data transfer mechanism).

6. Data Retention

• Account data is retained for as long as your account is active, plus 90 days after deletion to allow for dispute resolution.
• Billing records are retained for 7 years as required by tax law.
• Server logs are retained for a maximum of 90 days.
• Support correspondence is retained for 2 years.

7. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data, subject to legal retention obligations.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Restriction — request that we limit how we process your data.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

For any privacy-related questions or requests, contact us at [email protected].