Privacy Policy

Privacy policy

We at Bitfront AB (the Company) respect your privacy. Therefore we strive to only collect your personal identifiable data when you have given your express consent or when it is necessary to provide the full range of features available in SBOM Observer (the Service). This may include cookies to improve your browsing experience or information collected to improve our Services.

Our Privacy Policy applies for all use of the SBOM Observer service.

Data collection

What data is collected differs depending on the purpose of the visit to our website or use of our Service. Some information is automatically collected from all users (Automatic Data Collection) and other information is only collected when provided to us by users of the Service.

Automatic Data Collection

When someone uses our Service or uses one of the options to contact Bitfront, we may automatically collect technical data about that person. This collection is either performed by Bitfront or by a third party service provider. This collection includes, but is not restricted to, cookies and other tracking technology data.

Such technical data may consist of connectivity, usage data, data regarding the device, browser version, locale and other non-identifying data related to the activity of the person using the Service.

Data collected through Automatic Data Collection is used to get a better understanding of how our users and visitors make use of and engage with our Service.

Data provided to us by users

In addition to Automatic Data Collection, certain data is collected when it is provided to us by users directly. This includes data that is provided to us by registering an SBOM Observer account, taking part in online communities provided by SBOM Observer (e.g. the blog) and subscribing to our premium plan levels.

Registered Users

By registering an SBOM Observer account certain information is required to complete the registration process. This information includes, but is not restricted to, email addresses.

Premium plan Users

Users that choose to take part of our premium plan levels will be required to provide certain billing information. That information will be collected and processed by a relevant third-party Service Provider on behalf of the Company.

Correspondence

If a user requests assistance or inquire for help from the Company related to the Service, such correspondence, including the email address may be stored for future reference.

Data Usage

The information collected from all of our services is used to provide, maintain, protect and improve them, to develop new ones, and to protect the Service and our users.

1. When you contact Bitfront, we keep a record of your communication to help solve any issues you might be facing.

2. We use information collected from cookies and other technologies to improve your user experience and the overall quality of our services.

3. We will ask for your consent before using information for a purpose other than those that are set out in this Privacy Policy.

Bitfront processes personal information on servers in many countries around the world. We may process your personal information on a server located outside the country where you live.

Data Sharing

We don’t share your data with other companies, organizations or individuals outside of the Company, unless one of the following applies:

1. To provide products or services you've requested, with your permission.

2. To provide payment services, according to desired payment plan.

3. To investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service, or as otherwise required by law.

4. If Bitfront is acquired by or merged with another company we’ll notify you well before any info about you is transferred and becomes subject to a different privacy policy.

We may share non-identifiable data with our partners, third-party service providers and other entities.

Rights with respect to your information

If you wish to exercise your rights under applicable law (e.g. the EU GDPR) to access, rectify, erase or port your Personal Identifiable Data held with the Company – please contact us.

Many of these rights can be exercised by signing in and directly updating your account information. Please be aware, that erasure of Personal Identifiable data may result in cancellation and removal of your user, and hence access to the Service may be removed. If you have questions about exercising these rights or need assistance, please contact us at support@sbom.observer.

Please note that once you contact us by email, we may require additional information and documents, including certain Personal Data, in order to authenticate and validate your identity and to process your request. Such additional data will be retained by us for legal purposes.

We will maintain administrative and technical safeguards for the protection of the security, confidentiality and integrity of personal data and only process said data on behalf of the Customer and according to the data processing agreement (the “DPA”) made available online which is hereby incorporated by reference and which shall apply to such processing.

Data Security

The Company always strives to protect the Service and its users from unauthorized access and alteration of the data that we store.

1. We encrypt many of our services

2. We continuously review our information collection, storage processes to guard against unauthorized access.

3. We restrict access to personal identifiable information to employees of the Company and, in certain cases, contractors that need access to such information to process it on the Company’s behalf.

Deleted Data

If you cancel your account, some information may be stored on our servers in the form of backups. If you would like us to permanently delete your information from such backups, please contact us at support@sbom.observer and we will process your request.

In addition, we may keep some information for legal and accounting purposes, subject to applicable laws.

Children under the age of 16

SBOM Observer is not intended to be used by children under the age of 16. We do not intentionally collect Personal Identifiable Data from children and have no wish or intention to do so. If you have reason to believe we have collected such information, please contact us at support@sbom.observer and we will take efforts to delete that information.

Changes and questions

The Company may update this policy whenever necessary. We will always strive to notify you about significant changes by emailing user or by posting a notice on our site. You can request access, change or delete your personal information at any time by contacting us.

Questions about this privacy policy? Please send your questions to support@sbom.observer and we will be sure to answer them as soon as possible.