Privacy Policy

Last updated: 2026

This policy describes how Old Hillsbrad Data ("the Service") processes data in connection with its API platform.

Scope and roles

The deploying organization is the data controller for service database content and metrics; the Service acts as processor. Platform operation data (API logs, license registry) is processed by us to deliver the contracted service.

Data we process

Purposes

Processing is limited to providing database access, metrics aggregation, and license enforcement; securing and operating the platform; and meeting legal obligations. Data is not sold, brokered, or used for advertising or profiling of individuals.

Retention

Metrics are kept in aggregated form; license records persist for the term of the service agreement; security logs rotate and are deleted on a fixed schedule. On termination, customer data is returned or destroyed per contract.

Security

API traffic is encrypted in transit (TLS); data is encrypted at rest; access is restricted to authorized systems under least-privilege controls. Material incidents are reported to affected customers without undue delay.

Subprocessors and transfers

A small set of infrastructure providers (hosting, monitoring) processes data under data processing terms. Cross-border transfers rely on appropriate safeguards.

Your rights

Data requests from individuals should go to the deploying organization, which we assist as processor. Organizations manage their data via the service dashboard.

Cookies

This static site sets no tracking cookies; the dashboard uses strictly necessary session cookies only.

Changes and contact

Material changes are announced through the service dashboard, where privacy questions can also be raised.