Privacy Policy
Last updated: 2026
Scope and roles
For service database content and metrics, the deploying organization is the data controller and GemTek USB Services ("the Service") acts as processor. Platform operation data (API logs, license registry) is processed by us to deliver the contracted service.
Data we process
- Usage metrics — batched application usage events and operational signals, keyed by deployment.
- License validation data — license identifiers, entitlement states, and validation timestamps.
- Service database records — configuration and state data accessed through the API.
- Technical logs — IP addresses and request metadata for security and troubleshooting.
Purposes
Data is processed only to provide database access, metrics aggregation, and license enforcement under the service agreement; to secure and operate the platform; and to meet legal obligations. We do not sell data, broker it, or use it for advertising or profiling of individuals.
Retention
Metrics are retained in aggregated form; license records are kept for the duration of the service agreement; security logs rotate and are deleted on a fixed schedule. On termination, customer data is returned or destroyed per contract.
Security
All API traffic is encrypted in transit (TLS); data is encrypted at rest; stored data access is limited to authorized systems and personnel under least-privilege controls. Material incidents are reported to affected customers without undue delay.
Subprocessors and transfers
A small set of infrastructure providers (hosting, monitoring) processes data under data processing terms. Cross-border transfers rely on appropriate safeguards.
Your rights
Individuals should direct data requests to the deploying organization, which we assist as processor. Organizations manage their own data through the service dashboard.
Cookies
This static site sets no tracking cookies; the dashboard uses strictly necessary session cookies only.
Changes and contact
Material changes to this policy are announced through the service dashboard, where privacy questions can also be raised.