Privacy Policy

Atlas is built on the principle of collecting as little data as possible. The product runs entirely within your own infrastructure; content on your Proxmox servers (virtual machines, storage and network data) is not sent to Atlas servers by design. This policy explains the personal data we process during account, purchase and licensing flows, and your rights. Data controller: Göksel Urhan.

Data we collect

Account information (email address, name), purchase and license records (through our payment provider), support correspondence, your refund requests and the correspondence about them, and your website preferences (language, theme). Content on your Proxmox servers is not included.

Payment data

Payments are taken and processed by Paddle as our Merchant of Record. Your card details are processed by Paddle and are not disclosed to us; on our side we generally keep only commercial records of orders, licenses and billing.

License verification and update data

The installed product is designed to work without an internet connection. It connects to our servers for these tasks: license operations; update checks and downloads; downloading product content such as the app catalog and compatibility information; synchronizing support conversations; reporting the result of installations and updates (success or failure, version and duration). This last report can be switched off on the Privacy screen in Settings. Watch notifications to your account portal and usage statistics are off by default and are not sent unless you switch them on. In these operations the license, version and technical details needed to verify your license, determine update eligibility and prevent abuse may be processed; the server name is among them. We keep this data limited to its purpose and only as long as needed. The content on your Proxmox servers (virtual machines, storage and network data) is not sent, by design. If an installation or repair fails, the installation log is sent to find the cause: lines containing passwords or access keys are removed, addresses and names are hidden, and the records are deleted after 90 days. No log is sent for a successful installation. To confirm that the license is used on the server it is installed on, an irreversible digest derived from the server's identity and a short result on whether that identity has changed are also sent; the hardware information itself is not sent. This information is processed to ensure the license is used according to its terms and to prevent misuse, on the basis of legitimate interest, and is kept for 12 months; it is never the sole basis for any decision.

Usage statistics (optional)

So that we can decide how to develop the product, the installed product offers an optional usage statistics setting. It is off by default. When you switch it on, what is sent is limited to: product and Proxmox version, kernel version, node count, counts expressed as ranges, storage types, hardware class, installed module names and whether features are on or off; and, under a separate setting, error codes and how often they occurred. Server names, network addresses, virtual machine and storage names, user names, log records and file contents are not sent. You can see the full content of what would be sent on the Privacy screen inside the product before switching the setting on. Only the most recent submission is kept per installation and each new one overwrites the previous; history is kept only as anonymous totals. You can switch the setting off at any time. The legal basis is your explicit consent; withdrawing it does not affect processing carried out before the withdrawal. When the scale option is on, how often each screen was opened is also sent as a range; the screen name is the product own section name, not a name you gave.

Purposes and legal basis

We process your data to provide the service, run licensing and billing, offer support, ensure security and prevent fraud. Legal bases: performance of a contract, our legitimate interests, and our legal obligations.

Third-party processors

We use our Merchant of Record, Paddle, for payments and invoicing (including tax collection), together with third-party service providers for functions such as transactional email and website hosting. These providers process data solely to deliver the service and may change from time to time; your server content does not pass through them.

Cookies

Our website uses preference cookies (language, theme) for functionality. If you consent, measurement cookies and web analytics tools are used to understand how the site is used; if you do not, visits are only counted within the day, without a persistent identifier. If you open an account, the measurement you consented to may be linked to your account and is seen only by authorized staff. We do not use advertising cookies.

International data transfers

Our service providers may be located outside Türkiye or the European Union. In that case your personal data is transferred under the appropriate safeguards required by applicable law.

Retention

We retain personal data only for as long as necessary for the purpose it was collected and for the legal obligations we are subject to. License and transaction records may be kept for the applicable statutory limitation periods due to potential disputes and financial obligations.

Your rights

Under applicable data protection law (Türkiye’s KVKK and, where applicable, the GDPR) you have the right to access, rectify or erase your data, object to processing, and request data portability. You can send requests to contact@atlaspve.com.

Security

We apply reasonable technical and organisational measures to protect your personal data. However, no method of transmission or storage over the internet is 100% secure.

Children’s privacy

The service is not directed to persons under 18, and we do not knowingly collect personal data from children.

Changes and contact

We may update this policy from time to time and will notify you of material changes. For privacy questions: contact@atlaspve.com.