Introduction
This Privacy Policy explains how SUPMAN ("we", "us", "Company") collects, uses and protects personal data when you visit supman.solutions and solutions.supman.pl (the "Site") or use our software products (CAMO, DefaceCatcher, BruteCatch, SysClear Core, collectively the "Software"). The data controller is SUPMAN, Opole, Poland. You can reach us at [email protected].
1. Data we collect on the Site
- Contact form submissions. When you fill in the contact form we store your name, email, optional company, optional subject and your message in our database in order to reply to your enquiry.
- Technical metadata. We store a salted SHA-256 hash of your IP address (never the raw address) and your browser user-agent for the purpose of preventing spam and abuse of the contact endpoint.
- Bot-protection. We use Cloudflare Turnstile, a privacy-preserving challenge that does not use tracking cookies.
2. Data the Software does or does not collect
Each Supman product is designed to operate locally on your machine or your servers and does not collect personal data beyond what is strictly necessary to deliver the service. Specifically:
- No screen contents, files or documents are transmitted off-device.
- No usage analytics or behavioural tracking is performed inside the Software.
- License-validation calls (if applicable) transmit only the license key and product version.
3. Payments
Payments are processed by Paddle.com Market Limited as Merchant of Record. SUPMAN does not store your payment card details. Paddle's privacy notice applies to the payment data they collect.
4. Communications
We may use your email address to respond to support requests, send service-critical notifications and notify you of changes to our terms or policies. We do not send marketing emails without your prior consent.
5. Cookies and analytics
The Site does not set tracking cookies. Should we add analytics in the future, it will use a privacy-preserving tool (such as Cloudflare Web Analytics or a self-hosted instance) without third-party tracking cookies.
6. Data retention
Contact form submissions are retained for as long as necessary to handle your enquiry and for up to 24 months for audit and abuse-prevention purposes. Spam-protection records (rate-limit counters) are deleted automatically after 48 hours.
7. Your rights (GDPR / CCPA)
You have the right to access, correct, port, restrict or delete your personal data, and to object to its processing or withdraw consent where processing is based on consent. To exercise any of these rights, please email [email protected]. You also have the right to lodge a complaint with your local supervisory authority (in Poland: UODO, uodo.gov.pl).
8. Sub-processors
- Cloudflare - hosting, edge protection and bot-protection (Turnstile).
- Resend - transactional email delivery.
- Paddle - payment processing and Merchant of Record.
9. Changes
We may update this Privacy Policy from time to time. The updated version takes effect upon publication on this page.
10. Contact
SUPMAN, Opole, Poland. Email: [email protected].