SUDO Technology LTD (“SUDO Technology”, “we”, “us”, or “our”) respects your privacy. This policy covers personal data processed through sudotechnology.ltd, direct communications with us, and our products unless a product-specific notice says otherwise.
1. Who is responsible for your data?
SUDO Technology LTD, a company registered in Bulgaria, is the data controller for personal data described in this policy unless stated otherwise.
Contact: support@sudotechnology.ltd
2. When does this policy apply?
It applies when you browse this website, email us, request support or early access, or use a SUDO Technology product. Third-party websites linked from this site have their own privacy practices, which we do not control.
3. What data may be processed, and why?
| Data | Purpose | GDPR basis | Retention criterion |
|---|---|---|---|
| Name, email address, and message content you send | Reply to enquiries, support requests, product-interest messages, or partnership discussions | Steps requested before a contract; contract performance; or legitimate interests in responding and operating our business | Until the request is resolved, followed by a limited period needed for follow-up, dispute handling, or legal obligations |
| Account, workspace, team, and settings data when products become available | Provide, secure, maintain, and support the product you use | Contract performance and legitimate interests in service security and improvement | For the account or contract term, then only as needed for deletion, backup cycles, legal duties, or disputes |
| Basic server and security logs, such as IP address, request time, browser information, and requested page | Deliver the website, diagnose errors, prevent abuse, and protect systems | Legitimate interests in secure and reliable services | Kept only for the operational and security period required by the relevant hosting or infrastructure service |
| Analytics data, including page views, interactions, device and browser information, and approximate location derived from network data | Understand website use and improve content and performance through Google Analytics | Your consent | According to the retention setting configured for the Google Analytics property, followed by deletion or aggregation |
| Consent and privacy-preference records | Respect and demonstrate your choices | Legal obligation and legitimate interests; consent where the choice relates to consent-based processing | For as long as the choice applies and as needed to demonstrate compliance |
Please avoid sending passwords, payment-card details, health information, or other unnecessary sensitive data in free-text messages.
6. International data transfers
Some providers may process data outside the European Economic Area. Where required, we use an applicable safeguard such as an adequacy decision, the European Commission’s standard contractual clauses, and supplementary measures appropriate to the transfer.
7. How long is data kept?
We keep personal data only for the period necessary for the stated purpose, including applicable accounting, tax, security, contractual, and legal requirements. The table above gives the criteria used for the main categories. When data is no longer required, it is deleted or anonymised, subject to controlled backup cycles and legal holds.
8. Your data-protection rights
Where the GDPR applies, you may have the right to be informed; access your data; correct inaccurate data; request erasure; restrict processing; object to processing; receive eligible data in a portable format; withdraw consent at any time; and request human review of certain solely automated decisions with legal or similarly significant effects.
Rights are not absolute and may depend on the circumstances and lawful basis. We aim to respond without undue delay and within one month. Complex requests may take longer where the GDPR permits, in which case we will explain why.
You may lodge a complaint with Bulgaria’s Commission for Personal Data Protection (CPDP) or the supervisory authority in your EU/EEA country. Visit cpdp.bg ↗.
9. Security
We use technical and organisational measures intended to protect personal data against unauthorised access, alteration, loss, or disclosure. Measures are selected according to the nature of the data and risk. No internet service can guarantee absolute security.
10. Children
This website and our business products are not directed to children. We do not knowingly collect children’s personal data through the public website. If you believe a child has provided data, contact us so we can assess and take appropriate action.
11. Changes to this policy
We may update this policy when our services, providers, or legal obligations change. The effective date and version at the top identify the current notice. Material changes will be communicated where reasonably practicable.
12. Contact and privacy requests
Email support@sudotechnology.ltd with “Privacy request” in the subject. We may ask for proportionate information to verify identity before acting on a request.
See also our GDPR and cookie controls → and Terms of Service →.