1. Who this policy applies to#
This Policy applies to visitors to our website, customer contacts, authorised users of the Services and other individuals whose personal data we process.
2. Our role#
For most personal data processed through the Services, TopMod acts as a data processor on behalf of its business customers. Our customers determine why and how Customer Data is processed. TopMod acts as a data controller only for limited activities such as account administration, billing, support, security, marketing communications and operation of our business.
3. Information we collect#
- Account Information (name, email address, organisation)
- Authentication Information (login and security information)
- Customer Content (bug reports, recordings, screenshots, attachments and files)
- Usage Information (IP address, browser, device information and service usage)
- Support Information (emails, tickets and communications)
- Operational and Diagnostic Data used to operate, secure and improve the Services.
4. How we use personal data#
As a processor, we process Customer Data only on our customers' documented instructions to provide, secure and support the Services. As a controller, we use personal data to administer accounts, respond to enquiries, provide support, secure and improve the Services, communicate with customers, comply with legal obligations and protect our legitimate business interests.
5. Legal bases#
Where TopMod acts as a controller, our legal bases include performance of a contract, compliance with legal obligations, our legitimate interests and, where required, your consent.
7. International transfers#
Personal data may be transferred to countries outside your own, including the United States. Where required, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses or other lawful safeguards.
8. Security#
We maintain commercially reasonable administrative, technical and organisational safeguards designed to protect personal data. These include encryption in transit, access controls, logging and monitoring, vulnerability management and backup procedures.
9. Retention#
We retain personal data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes and enforce our agreements. Customer Data is retained and deleted in accordance with the Subscription Terms and our customers' instructions.
10. Your rights#
Depending on your location, you may have rights to access, correct, delete, restrict or object to the processing of your personal data and to request data portability. Where TopMod acts as a processor, requests should normally be directed to the relevant customer organisation, although we will assist our customers where required.
12. Contact us#
For privacy enquiries, please contact legal@topmod.dev.
If you are dissatisfied with our response, you may also contact the supervisory authority responsible for data protection in your jurisdiction, including the UK Information Commissioner's Office where applicable.
13. Changes to this policy#
We may update this Privacy Policy from time to time. The latest version will always be published on our website together with its effective date.