Privacy policy

Last updated 22 October 2026

This covers the website, access requests and accounts. Data inside your Sandboxes, including files, commands, output and connected logins, is yours: we process it only as your processor, under our data processing agreement, and look at it only for security or when the law requires.

Who we are

[Company legal name], [Registered address], is the controller of the data described here. Questions go to privacy@ortam.dev.

What we collect

Website visits: Server logs with IP address, browser and time, to run and protect the site. Basis: our legitimate interest (Art. 6(1)(f) GDPR).
Access requests: Your email and what you tell us, to reply and set up your organization. Basis: steps toward a contract (Art. 6(1)(b)), or our legitimate interest when you write for an organization (Art. 6(1)(f)).
Accounts: Your organization’s name, your contacts’ names and emails, billing details and usage, to run and bill the service. API keys are stored only as hashes. Basis: the contract (Art. 6(1)(b)), our legitimate interest for contacts acting for an organization (Art. 6(1)(f)), and accounting law for invoices (Art. 6(1)(c)).

There are no analytics or advertising cookies. Your theme choice stays in your browser’s local storage.

A contact email is needed to answer you, and contact and billing details to provide the service; everything else is optional.

Who sees it, and where

Our hosting, payment and email providers, listed on the subprocessors page. We don’t sell personal data or share it for advertising.

It is stored in the EU, on Hetzner in Germany and Finland. If a provider works outside the EEA, the European Commission’s standard contractual clauses apply; ask us for a copy.

How long we keep it

Server logs: [Period]
Access requests: Until your organization is set up, or [period] if it isn’t
Accounts and usage: While you’re a customer, then [period]
Invoices: As long as tax law requires

Your rights

You can ask to see, correct, delete, restrict or export your data, or object to uses based on our legitimate interest. Write to privacy@ortam.dev. You can also complain to a data protection authority, such as ours, [Data protection supervisory authority].

Changes

We post changes here and update the date above. Customers get an email before a material change applies.