Privacy Policy

Data Controller

The data controller is SmartHomeEntry, Grzegorz Mruk, Poland. For data protection inquiries: [email protected].

Data We Collect

• Account data: email address, name (provided during registration via OAuth or email OTP)
• Billing data: processed by Stripe; SmartHomeEntry stores only the Stripe customer ID
• Tunnel metadata: subdomain, relay host, remote port, SSH public key
• Heartbeat data: agent IP address, timestamp of last heartbeat (retained for 30 days)
• Usage logs: request timestamps and HTTP status codes (retained for 7 days)

Legal Basis

• Contract performance (Art. 6(1)(b) GDPR) - account provisioning, tunnel management, billing
• Legitimate interest (Art. 6(1)(f) GDPR) - security monitoring, abuse prevention
• Legal obligation (Art. 6(1)(c) GDPR) - tax and accounting records

Retention Period

• Account data: for the duration of the subscription + 2 years
• Billing records: 7 years (legal requirement)
• Heartbeat logs: 30 days
• SSH private keys: returned once to the agent and never stored in plaintext thereafter

Third-Party Data Processors

Your data may be processed by the following third parties:

• Stripe - payment processing (Stripe, Inc., USA - Privacy Shield / SCC)
• Supabase (AWS) - database and authentication (Supabase / AWS, EU region - Frankfurt)
• Resend - transactional email delivery (Resend, Inc., USA - SCC)
• OVH - application and relay hosting (OVH Sp. z o.o. - Warsaw, EU)
• Cloudflare - DNS, content delivery and attack protection (Cloudflare, Inc., USA - SCC). Cloudflare terminates the HTTPS connection for tunnel subdomains, so traffic heading to your server passes through its infrastructure in decrypted form.
• PostHog - anonymous visit analytics (PostHog, EU region - Frankfurt). Loaded only after consent in the cookie banner; consent can be withdrawn at any time.

Cookies

SmartHomeEntry uses session cookies (Supabase Auth) strictly necessary for login and session management - under GDPR these do not require consent. Anonymous visit analytics (PostHog, EU region) are loaded only after you consent via the cookie banner; you can withdraw consent at any time by clearing site data in your browser. We do not use advertising or third-party tracking cookies. See our Cookie Policy for details.

Your Rights

Under GDPR you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erasure ("right to be forgotten") (Art. 17)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at: [email protected]

Contact

Data controller: SmartHomeEntry, Grzegorz Mruk, Poland
[email protected]