Privacy Policy
Last updated: 2026
This policy describes how Old Hillsbrad Data ("the Service") processes data in connection with its API platform.
Scope and roles
The deploying organization is the data controller for service database content and metrics; the Service acts as processor. Platform operation data (API logs, license registry) is processed by us to deliver the contracted service.
Data we process
- Usage metrics: usage counters and diagnostic signals reported by applications, keyed by deployment.
- License data: license identifiers, entitlement states, and validation timestamps.
- Configuration records: deployment profiles and parameters stored in the service database.
- Technical logs: IP addresses and request metadata for security and troubleshooting.
Purposes
Processing is limited to providing database access, metrics aggregation, and license enforcement; securing and operating the platform; and meeting legal obligations. Data is not sold, brokered, or used for advertising or profiling of individuals.
Retention
Metrics are kept in aggregated form; license records persist for the term of the service agreement; security logs rotate and are deleted on a fixed schedule. On termination, customer data is returned or destroyed per contract.
Security
API traffic is encrypted in transit (TLS); data is encrypted at rest; access is restricted to authorized systems under least-privilege controls. Material incidents are reported to affected customers without undue delay.
Subprocessors and transfers
A small set of infrastructure providers (hosting, monitoring) processes data under data processing terms. Cross-border transfers rely on appropriate safeguards.
Your rights
Data requests from individuals should go to the deploying organization, which we assist as processor. Organizations manage their data via the service dashboard.
Cookies
This static site sets no tracking cookies; the dashboard uses strictly necessary session cookies only.
Changes and contact
Material changes are announced through the service dashboard, where privacy questions can also be raised.