Privacy Policy
The short version. The Bichon Software is self-hosted and does not send us your archived email, usage statistics, or telemetry. This policy covers the personal data we handle when you visit this website, contact us, or buy a commercial license.
1. Who is responsible
[LEGAL ENTITY NAME], [STREET AND NUMBER], [POSTAL CODE, CITY], [COUNTRY], is the controller of the personal data described in this policy. You can reach us at rustmailer.git@gmail.com.
2. The Software does not report to us
Bichon runs on infrastructure you control. We do not have access to your deployment, your mailboxes, or your archive, and the Software does not transmit archived content, usage statistics, diagnostics, or telemetry to us. License validation is performed offline inside your deployment. When the Software connects to third-party services — such as your IMAP servers, an OIDC provider, a timestamp authority, or a SIEM endpoint — it connects to systems you configure, under your instructions. Those providers’ own privacy terms apply to that processing.
Because we do not process the email you archive, we are not a processor or controller of that data. You remain responsible for it, including for any notices and legal bases required in your jurisdiction.
3. Personal data we process
| Category | What it includes | Source |
|---|---|---|
| Correspondence | Name, email address, company, and the content of messages you send us (including attachments). | You, when you contact us. |
| Orders and licenses | Name, email address, billing details, tax or VAT identification number, edition, instance ID (machine code), account limit, update-window dates, and license key metadata. | You, when you place an order or request a license. |
| Payment and accounting | Invoice records, bank transfer details, amounts, and tax information. We do not receive or store full card numbers; card data, if used, is handled by the payment provider. | You and your bank or payment provider. |
| Website logs | IP address, browser type and version, requested URL, referrer, and timestamps, collected by our hosting provider for security and operations. | Automatically, when you visit the Site. |
| Local preferences | Your light or dark theme choice, stored in your browser’s local storage. It is not sent to us. | Your browser. |
| Account data (only if sign-in is enabled) | If account sign-in is enabled on the Site, our authentication provider processes your name, email address, and session data on our behalf. | You, when you create or use an account. |
We do not use analytics or advertising scripts, and we do not build profiles of visitors. We do not knowingly collect data from children — see section 11.
4. Why we process it, and on what legal basis
- To provide the Software and licenses — issuing license keys, managing updates and renewals, and answering support requests. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
- To meet legal obligations — invoicing, tax, and accounting records. Legal basis: legal obligation (GDPR Art. 6(1)(c)).
- To keep the Site and our business secure — server logs, fraud prevention, and enforcing our terms. Legal basis: legitimate interests (GDPR Art. 6(1)(f)).
- To communicate with you — responding to inquiries and, where permitted, informing existing customers about releases and renewal dates. Legal basis: contract, legitimate interests, or consent where required. You can opt out of non-essential messages at any time.
5. Cookies and local storage
The Site does not use advertising or analytics cookies. It stores your theme preference in local storage, and we do not use that value to identify or track you. If account sign-in is enabled, cookies set by our authentication provider are strictly necessary to keep you signed in. If we introduce non-essential cookies, we will ask for consent first and update this policy.
6. Who receives data
We do not sell personal data. We share it only with service providers that help us operate the Site and the business, and only as necessary:
- Hosting and infrastructure: [HOSTING PROVIDER], which serves the Site and processes technical logs.
- Email: Google (Gmail), which stores and transmits our correspondence.
- Accounting and tax advisers: where necessary to prepare invoices, bookkeeping, and tax filings.
- Payment and banking providers: banks or payment processors used to receive and reconcile payments.
- Authentication provider: only if sign-in is enabled on the Site.
- Authorities: where required by law, court order, or to establish or defend legal claims.
These providers act under contracts that require appropriate confidentiality and security measures. Some of them may process data outside your country; see section 7.
7. International transfers
We may process data in countries other than the one you live in, including the United States, where our email and hosting providers operate. Where EU/EEA or UK law applies, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses, the UK Addendum, or an adequacy decision (including the EU-US Data Privacy Framework where the recipient is certified). You may ask us for a copy of the relevant safeguards.
8. How long we keep data
- Inquiries and correspondence: up to 24 months after the last contact, unless we need it longer to handle an ongoing matter.
- Orders, invoices, and license records: for the term of the license and for the period required by tax and commercial law (typically 6 to 10 years), and for as long as needed to establish, exercise, or defend legal claims.
- Website logs: normally 30 days, unless needed to investigate a security incident.
- Account data: for as long as the account exists, if sign-in is enabled.
9. Your rights
Depending on where you live, you may have some or all of the following rights. To exercise any of them, email rustmailer.git@gmail.com. We may need to verify your identity before acting.
- EU/EEA and UK (GDPR/UK GDPR): access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent at any time. You may lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office).
- California (CCPA/CPRA): the right to know what personal information we collect, use, and disclose; the right to delete and to correct; the right to opt out of the sale or sharing of personal information (we do neither); the right to limit the use of sensitive personal information (we do not use it for that purpose); and the right not to be discriminated against for exercising your rights. You may use an authorized agent.
- Canada (PIPEDA and provincial laws): access and correction, and the right to complain to the Office of the Privacy Commissioner of Canada or your provincial regulator.
- Australia (Privacy Act 1988): access and correction, and the right to complain to the Office of the Australian Information Commissioner.
- New Zealand (Privacy Act 2020): access and correction, and the right to complain to the Office of the Privacy Commissioner.
We will respond within the period required by applicable law. If we cannot fulfil a request, we will explain why.
10. Do Not Track and Global Privacy Control
We do not track visitors across sites and do not sell or share personal information, so there is no cross-site tracking to opt out of. We treat Global Privacy Control signals as a confirmation of that fact.
11. Children
The Site and the Software are intended for businesses and are not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Security
We use appropriate technical and organizational measures to protect the personal data we handle, including encrypted connections, access controls, and limiting access to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. The security of your own deployment and of your archived email is your responsibility, as described in the Terms of Service.
13. Changes to this policy
We may update this policy from time to time. The current version is always posted on this page with the date of the last update. If a change materially affects how we handle your personal data, we will notify license holders by email where we have an address on file, or post a prominent notice on the Site.
14. Contact and complaints
Questions or requests: rustmailer.git@gmail.com.
[LEGAL ENTITY NAME]
[STREET AND NUMBER], [POSTAL CODE, CITY], [COUNTRY]
If you are not satisfied with our response, you may complain to your local data protection authority. In the EU/EEA, you can find your authority through the European Data Protection Board. In the UK, the Information Commissioner’s Office; in Canada, the Office of the Privacy Commissioner; in Australia, the Office of the Australian Information Commissioner; in New Zealand, the Office of the Privacy Commissioner.