Privacy Policy — Hauptsoft
Welcome to Hauptsoft. We develop offline-first desktop software for electronics and GSM repair shops. This Privacy Policy explains how we collect, process, protect, and handle your data across our websites (https://hauptsoft.com, https://pl.hauptsoft.com), customer portal, and desktop applications.
1. Data Controller
The data controller responsible for your personal data is:
- Project name: Hauptsoft (product: HS-serwis)
- Founding team:Volodymyr Kostromin & Dmytro Mazur
- Location: Wrocław, Lower Silesia, Poland (remote / early-stage)
- Contact: support@hauptsoft.com
Hauptsoft is currently in active development / closed beta. Email is used only for registered testers, account authentication, and people who opted in via our survey.
2. What data we collect and how we use it
A. Website and user portal
When you register for an account, join the pilot, or submit the validation survey:
- Account and contact data: email address, name, workshop name (optional). Purpose: account creation, authentication, password resets, and direct notices about the pilot you requested. Legal basis (GDPR): Art. 6(1)(b) (performance of a service) and Art. 6(1)(a) (consent for early-access / survey contact).
- Survey answers: the three interview replies submitted with your email on the Polish product page. Purpose: product validation and pilot invitations. Legal basis: Art. 6(1)(a).
- Technical and log data: IP address, browser type, timestamp, and authentication tokens. Purpose: system security, rate limiting, and spam/abuse prevention. Legal basis: Art. 6(1)(f) (legitimate interest in securing our infrastructure).
B. Desktop software (offline-first)
- Local repair and customer data: repair tickets, customer details, IMEI/serial numbers, inventory, and point-of-sale data entered into the desktop app are stored in a local SQLite database on your computer.
- No routine upload of workshop customer files: we do not inspect or host your workshop’s end-customer records as part of daily use.
- Optional encrypted cloud backup: if you enable cloud backup, encrypted archives are stored in Google Cloud Storage. Archives are encrypted on your device; we do not have the key to read workshop contents.
- Optional public status page: if the workshop enables it, only the status the workshop publishes (for customer lookup) is stored for the public
/w/[slug]page.
3. Email communication (transactional and anti-spam)
Hauptsoft enforces a strict anti-spam policy:
- Transactional messages: email verification, password-reset links, and security alerts are one-to-one messages triggered by your action on the portal. We send them with Amazon SES in
eu-central-1(Frankfurt). - Pilot and product updates: sent only to people who opted in via the survey or sign-up forms. Non-transactional mail includes a way to withdraw consent (email support@hauptsoft.com).
- No third-party lists: we do not buy, sell, rent, scrape, or share email lists.
- Bounce and suppression: addresses with permanent delivery failures or complaints are suppressed and not retried.
4. Data processors
We use infrastructure providers under GDPR-compliant processing terms:
- Amazon Web Services (AWS) — Amazon SES (eu-central-1 / Frankfurt, Germany): delivery of transactional and authentication email.
- Google Cloud: hosting of the portal API, account database, interview leads, and optional encrypted backup objects.
- Cloudflare: DNS, CDN, and TLS for public websites.
Some providers may process data outside the EEA on the basis of Standard Contractual Clauses or other GDPR transfer mechanisms.
5. Data retention
- Account data: kept while the portal account is active. You may request deletion at any time.
- Pilot waitlist / survey: until the beta/pilot ends or you withdraw consent, and not longer than 24 months from sign-up.
- Server logs: rotated and deleted after 30 to 90 days.
6. Your rights under GDPR
You have the right to:
- access a copy of the personal data we hold about you;
- rectify inaccurate data;
- erasure (“right to be forgotten”) of your account and email address;
- restrict processing, object, and data portability where applicable;
- withdraw consent at any time (without affecting prior lawful processing);
- lodge a complaint with a supervisory authority (in Poland: Urząd Ochrony Danych Osobowych — UODO).
To exercise these rights, write to support@hauptsoft.com (subject: Privacy).
7. Changes
We may update this policy as the software moves from beta to launch. The current version is always at this URL, with an updated date above.
Polish version: /pl/polityka-prywatnosci. Terms: /terms.