This Privacy Policy describes how Inovit d.o.o. ("Managd", "we") collects and processes personal data when you visit managd.net or use our Services. We act as the data controller for personal data we collect about you as a customer or visitor.
1. Data we collect
Account data
- Name, email address, password hash
- Company name, billing address, VAT/tax ID where applicable
- Phone number where you provide one
Billing data
- Invoices, payment history, last four digits and brand of payment cards
- Card and bank details are processed by our payment processor; we do not store full card numbers.
Service data
- Server hostnames, IP addresses, plan details, resource usage and uptime metrics
- Support tickets and correspondence
- Audit logs of administrative actions
Technical data
- IP address, browser, device, language, and timestamps of requests to managd.net and the dashboard
- Cookies and similar technologies (see our Cookie Policy)
2. Why we process it
- To provide the Services — provisioning, billing, support, security (contract performance).
- To run the business — accounting, tax, fraud prevention, dispute handling (legal obligation and legitimate interests).
- To improve and secure the platform — diagnostics, abuse detection, capacity planning (legitimate interests).
- To communicate — service notices and, with your consent where required, product updates.
3. Who we share it with
We share personal data with carefully selected subprocessors strictly to operate the Services. A current list is available on request and includes:
- Infrastructure: Hetzner Online GmbH (Germany / Finland) — server hosting
- Database & auth: Supabase (EU region)
- Email delivery: Resend / Postmark or equivalent transactional email provider
- Payments: Stripe or Paddle, depending on region
We may also disclose data to comply with legal obligations, enforce our Terms, or protect rights, property, or safety.
4. International transfers
Where personal data is transferred outside the European Economic Area, we rely on adequacy decisions or Standard Contractual Clauses approved by the European Commission, together with appropriate technical and organisational measures.
5. Retention
- Account and service data: for the life of your account and up to 24 months after closure.
- Invoices and accounting records: as required by law (typically 10 years).
- Server backups: per the retention window of your plan.
- Audit and security logs: up to 12 months.
6. Your rights
You have the right to:
- access the personal data we hold about you;
- request correction or deletion;
- request portability of data you provided to us;
- object to or restrict certain processing;
- withdraw consent at any time, where consent is the basis; and
- lodge a complaint with a data protection authority.
Send requests to legal@managd.net. We may need to verify your identity before we can act.
7. Security
We use industry-standard measures including encryption in transit, encrypted storage of secrets, role-based access control, audit logging, and least-privilege access for staff. No system is perfectly secure; please report any vulnerabilities to security@managd.net.
8. Children
The Services are not directed at children under 16, and we do not knowingly collect their data.
9. Changes
We may update this Privacy Policy. Material changes will be announced by email or in-app notice before they take effect.
10. Contact
Inovit d.o.o., Ul. Fakultetska 37, 72000 Zenica, Bosnia and Herzegovina — legal@managd.net.