Privacy Policy

1. Introduction

At InfraUX, we take the privacy of our users very seriously. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our cloud infrastructure management platform.

By using InfraUX, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect different types of information to provide and improve our services:

2.1 Personal Information

• Registration data: Name, email address, company
• Payment information: Processed securely through Paddle (we do not store card data)
• Profile information: Profile picture, user preferences, settings

2.2 Usage Data

• In-app activity: Diagrams created, projects, collaborations
• Access logs: IP addresses, browser type, pages visited
• Performance metrics: Load times, errors, feature usage

2.3 Cookies and Similar Technologies

• Essential cookies: To maintain your session and preferences
• Analytics cookies: To understand how you use the platform (Mixpanel, PostHog)
• Marketing cookies: Only with your explicit consent

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our services
• Process payments and manage subscriptions
• Send important notifications about your account
• Improve and personalize your experience
• Develop new features
• Prevent fraud and malicious activities
• Comply with legal obligations
• Send marketing communications (only with your consent)

4. Sharing Information with Third Parties

We do not sell your personal information. We only share data with third parties in the following cases:

4.1 Service Providers

• Paddle: Payment processing and billing
• Mixpanel/PostHog: Usage analysis and product improvement
• AWS/GCP: Infrastructure hosting
• SendGrid: Sending transactional emails

4.2 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred with prior notice.

5. Data Security

We implement technical and organizational security measures to protect your information:

• Data encryption in transit (TLS/SSL) and at rest
• Two-factor authentication (2FA) available
• Restricted access to personal data
• Regular security audits
• Compliance with industry standards
• Automatic backups and disaster recovery

6. Your Rights

You have the following rights over your personal information:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Deletion: Request the deletion of your account and data
• Portability: Receive your data in a structured format
• Objection: Object to the processing of your data
• Restriction: Limit the processing of your data

7. How to Delete Your Account

To delete your account and all associated data:

1. Log in to your InfraUX account
2. Go to Settings → Account
3. Click on "Delete account"
4. Confirm the deletion by entering your password

You can also request deletion by contacting support@infraux.com. We will process your request within 30 days.

8. Data Retention

We retain your personal information only for as long as necessary:

• Active account data: As long as you maintain your account
• Data after cancellation: 30 days to allow reactivation
• Billing records: 7 years for legal requirements
• Security logs: 90 days
• Backups: Maximum 90 days after deletion

9. Minors

InfraUX is not intended for children under 18. We do not knowingly collect information from minors. If we discover that we have collected data from a minor, we will delete it immediately.

10. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that these transfers comply with applicable regulations through:

• EU Standard Contractual Clauses
• Privacy certifications
• Privacy impact assessments

11. Changes to this Policy

We may update this policy from time to time. Significant changes will be notified by email or through a prominent notice on the platform at least 30 days in advance.

12. Contact

If you have questions about this policy or how we handle your data, contact us: