Privacy policy

Last updated: 2026-04-09

Who we are

placemy.cloud is operated by HPT Limited, an Irish private company registered at the Companies Registration Office under number 559430. For the purposes of the GDPR, HPT Limited is the data controller for personal data processed through this website and the placemy product. Contact: privacy@placemy.cloud.

What we collect

We are deliberate about the data we hold. The complete list:

• Account: email address and optional name, provided when you sign in or subscribe.
• Billing: Stripe customer ID, subscription status, and the plan you are on. Payment card details are held by Stripe, not by us.
• Licence: the licence key issued to you, its status, and a timestamp each time the CLI validates it.
• Support: the content of any tickets you open with the team, and our replies.
• Server logs: request IPs and user agents for a maximum of 30 days, used only for abuse investigation.

We explicitly do not collect your cloud inventory, your resource graphs, your cost data, or your placemy scan results. Those stay entirely inside your own account. See the data-handling page for the precise list.

Why we process it

• To provide the product (GDPR Article 6(1)(b), performance of a contract).
• To bill you and comply with Irish tax law (Article 6(1)(c), legal obligation).
• To investigate abuse of our infrastructure (Article 6(1)(f), legitimate interests).

Sub-processors

We use a small number of well-known sub-processors. Each one has an active DPA with HPT Limited:

• Stripe Payments Europe Ltd — billing and Customer Portal.
• Neon Inc — managed Postgres hosting.
• Vercel Inc — application hosting and CDN.
• Resend (Drnky Inc) — transactional email.

We will update this list before adding a new sub-processor.

International transfers

Where personal data leaves the EEA, we rely on the European Commission's Standard Contractual Clauses with each sub-processor. We prefer EU-region deployments for Neon and Vercel where the option exists.

Retention

• Account and billing records: retained for the life of your subscription plus seven years (Irish tax law minimum).
• Licence records: retained until you ask us to delete them.
• Support tickets: retained for two years after closure.
• Server logs: 30 days.

Your rights

Under the GDPR you can ask us to access, correct, export, or delete your personal data, and you can object to or restrict processing. Email privacy@placemy.cloud and we'll respond within one month. You also have the right to lodge a complaint with the Irish Data Protection Commission.