Privacy Policy

1. Introduction

Squad as a Service SL ("we", "us", or "our") operates ShellBot. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and authentication credentials
• Payment Information: Processed securely through Stripe (we do not store card details)
• Profile Information: Any additional information you choose to provide
• Support Communications: Messages you send to our support team

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: IP address, browser type, operating system
• Log Data: Server logs including access times and errors
• Cookies: Session cookies for authentication and preferences

2.3 Bot Instance Data

• Server Metrics: VPS status, resource usage, uptime
• Configuration Data: Channel connections, bot settings
• Provisioning Events: Installation progress, health checks

3. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining the Service
• Processing your subscription and payments
• Provisioning and managing your bot instances
• Sending service updates and notifications
• Providing customer support
• Improving and optimizing the Service
• Detecting and preventing fraud or abuse
• Complying with legal obligations

4. Third-Party Services

We use the following third-party services to operate ShellBot:

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Access controls and authentication
• Regular security audits and updates
• Data backup and disaster recovery procedures
• Staff training on data protection

Your bot instances run in isolated VPS environments. We do not access your bot data except for technical support purposes with your explicit consent.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you cancel your subscription, we retain your account data for 30 days to allow for reactivation. After 30 days, your bot instance and associated data are permanently deleted. We may retain certain information for longer periods as required by law or for legitimate business purposes (e.g., billing records).

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain data processing activities
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at sales@shellbot.com. We will respond within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and service functionality
• Preference Cookies: Remember your settings (e.g., theme preference)
• Analytics Cookies: Understand how you use the Service (anonymized)

You can control cookies through your browser settings. Note that disabling essential cookies may affect Service functionality.

9. International Data Transfers

Your data is primarily processed and stored within the European Union (Hetzner servers). When we transfer data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact Us

For questions about this Privacy Policy or to exercise your data protection rights, contact us: