Privacy Policy

Atlas is built on the principle of collecting as little data as possible. The product runs entirely within your own infrastructure; content on your Proxmox servers (virtual machines, storage and network data) is not sent to Atlas servers by design. This policy explains the personal data we process during account, purchase and licensing flows, and your rights. Data controller: Göksel Urhan.

Data we collect

Account information (email address, name), purchase and license records (through our payment provider), support correspondence, your refund requests and the correspondence about them, and your website preferences (language, theme). Content on your Proxmox servers is not included.

Payment data

Payments are taken and processed by Paddle as our Merchant of Record. Your card details are processed by Paddle and are not disclosed to us; on our side we generally keep only commercial records of orders, licenses and billing.

License verification and update data

The installed product is designed to work without an internet connection. It connects to our servers only in these cases: license operations, update checks and downloads; watch notifications to your account portal if you switched them on; and usage statistics, again only if you switched them on. The last two channels are off by default and until you switch them on not a single request goes out. In these operations the license, version and technical details needed to verify your license, determine update eligibility and prevent abuse may be processed; the server name is among them. We keep this data limited to its purpose and only as long as needed. The content on your Proxmox servers (virtual machines, storage and network data) is not sent, by design.

Usage statistics (optional)

So that we can decide how to develop the product, the installed product offers an optional usage statistics setting. It is off by default. When you switch it on, what is sent is limited to: product and Proxmox version, kernel version, node count, counts expressed as ranges, storage types, hardware class, installed module names and whether features are on or off; and, under a separate setting, error codes and how often they occurred. Server names, network addresses, virtual machine and storage names, user names, log records and file contents are not sent. You can see the full content of what would be sent on the Privacy screen inside the product before switching the setting on. Only the most recent submission is kept per installation and each new one overwrites the previous; history is kept only as anonymous totals. You can switch the setting off at any time. The legal basis is your explicit consent; withdrawing it does not affect processing carried out before the withdrawal. When the scale option is on, how often each screen was opened is also sent as a range; the screen name is the product own section name, not a name you gave.

Purposes and legal basis

We process your data to provide the service, run licensing and billing, offer support, ensure security and prevent fraud. Legal bases: performance of a contract, our legitimate interests, and our legal obligations.

Third-party processors

We use our Merchant of Record, Paddle, for payments and invoicing (including tax collection), together with third-party service providers for functions such as transactional email and website hosting. These providers process data solely to deliver the service and may change from time to time; your server content does not pass through them.

Cookies

Our website uses preference cookies (language, theme) for functionality. We may use web analytics tools for aggregate, anonymous statistics. We do not use third-party advertising cookies.

International data transfers

Our service providers may be located outside Türkiye or the European Union. In that case your personal data is transferred under the appropriate safeguards required by applicable law.

Retention

We retain personal data only for as long as necessary for the purpose it was collected and for the legal obligations we are subject to. License and transaction records may be kept for the applicable statutory limitation periods due to potential disputes and financial obligations.

Your rights

Under applicable data protection law (Türkiye’s KVKK and, where applicable, the GDPR) you have the right to access, rectify or erase your data, object to processing, and request data portability. You can send requests to contact@atlaspve.com.

Security

We apply reasonable technical and organisational measures to protect your personal data. However, no method of transmission or storage over the internet is 100% secure.

Children’s privacy

The service is not directed to persons under 18, and we do not knowingly collect personal data from children.

Changes and contact

We may update this policy from time to time and will notify you of material changes. For privacy questions: contact@atlaspve.com.