Privacy Policy
Last updated: August 2026
This policy explains how we collect, use and protect personal data when you use Machineble. It is written to comply with the EU General Data Protection Regulation (GDPR).
01Who is the controller
The data controller is DigitalPunkers s.r.o., ID 04983700, VAT CZ04983700, with its registered seat at Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czech Republic. You can reach us about privacy at [email protected].
02What data we process
Account data — email address and an authentication credential (passwords are stored only as hashes by our authentication provider).
Service data — the website URLs you submit for auditing, audit results and reports tied to your account, and your plan and billing status.
Technical data — standard server logs (IP address, browser type, timestamps) needed for security and operation, and anonymous usage analytics if you consent.
03Why we process it (legal bases)
Contract (Art. 6(1)(b) GDPR) — creating and maintaining your account, running audits you request, billing.
Legitimate interest (Art. 6(1)(f) GDPR) — securing the service, preventing abuse, improving reliability.
Consent (Art. 6(1)(a) GDPR) — analytics and marketing cookies, which we only use after your opt-in via the cookie banner.
Legal obligation (Art. 6(1)(c) GDPR) — accounting and tax records.
04Who receives the data
We use a small number of processors to operate the service: cloud hosting and database infrastructure, transactional email delivery, and — only with your consent — analytics tooling. Each processor is bound by a data processing agreement and may process data only on our documented instructions.
We do not sell your personal data and we do not share it with third parties for their own marketing.
05International transfers
Where a processor stores or processes data outside the EU/EEA (typically in the United States), the transfer is safeguarded by the European Commission's Standard Contractual Clauses or an adequacy decision, as applicable.
06How long we keep it
Account and service data is kept for the lifetime of your account and deleted or anonymized within 12 months of account closure, unless we must keep it longer for legal obligations (e.g. accounting records, kept for up to 10 years under Czech law). Technical logs are retained for up to 12 months.
07Your rights
Under GDPR you have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting the lawfulness of prior processing). To exercise any of these rights, email [email protected].
You also have the right to lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Czech Data Protection Authority), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, uoou.gov.cz.
08Changes and contact
We may update this policy; material changes will be announced by email or in the product before they take effect. Questions about privacy: [email protected]. See also our Cookie Policy.
