Privacy Policy
1. What we collect
Account data: name, e-mail, company and invoicing details, password (stored only as a hash), language. Service data: domains and servers you add, read-only access credentials you provide (encrypted), security events reported by the plugin, agent or our monitoring, licence check-ins (domain, plugin version, IP). Website check: the domain you enter, your IP address and the time – kept in a log for 90 days to prevent abuse and to improve the service. Technical logs: web-server logs with IP addresses, kept 30 days.
2. Why and on what basis
To provide the service you ordered (contract), to send security alerts and invoices (contract), to keep our systems and yours secure and prevent abuse (legitimate interest), to meet accounting obligations (legal obligation – invoices are kept 10 years). We do not use your data for advertising and do not sell it.
3. Who processes it
Our servers are hosted by Hetzner Online GmbH (Finland/Germany, EU) and Interneto vizija UAB (Lithuania). Payments are processed by Paysera LT UAB through our store pay.fdd24.com; we receive the payment confirmation, not your card or bank details. E-mail is sent through our own mail servers. No data is transferred outside the EU/EEA.
4. Retention
Account and service data – for the duration of the account and 12 months after; access credentials – deleted within 30 days after the plan ends; security events – 24 months; invoices – 10 years; web logs – 30 days; website-check log – 90 days.
5. Your rights
You may access, correct, export or delete your data, object to processing based on legitimate interest, and complain to the State Data Protection Inspectorate (vdai.lrv.lt). Write to info@fdd24.com – we answer within 30 days. Deleting the account removes all service data except invoices we must keep by law.
6. Cookies
fddshield.com uses no cookies and no analytics. app.fddshield.com uses one strictly necessary session cookie (shsess) to keep you logged in; it is deleted when you close the browser or log out.
7. Security
All connections are encrypted (HTTPS). Passwords are hashed; access credentials are encrypted with keys kept outside the web root; servers are monitored around the clock – with the same FDD Shield we offer you.