Privacy Policy

Version 2026-09, published 17 September 2026. This policy explains what personal data Usevell Labs LTD processes when you use the fernsteuerung.io website and platform, and why. It is the policy referred to in clause 11 of the Subscription Terms.

1. Controller. Usevell Labs LTD, Griva Digeni 51, Athineon Court, Office 202, 8047 Paphos, Cyprus, registration HE445476. Email: contact@fernsteuerung.io.

2. What we process.

• Account data: name, work email address, company and role of each user; the password only as a hash.
• Usage data: IP address, browser type and time of each access, and the platform's activity log (logins, leases, power and console commands, flash jobs, API calls with the token used). The activity log is also shown to the customer's own organisation.
• Customer data: images, test scripts and results stored or produced on the platform. They belong to the customer, are processed only to operate the platform, and should not contain personal data.
• Contact data: what you send us by email, and an email address entered in the update form on the website.

3. Purpose and legal basis. We process account and usage data to run the platform and the accounts under the Subscription Terms (Art. 6(1)(b) GDPR), to keep the platform secure, prevent abuse and give customers an audit trail (Art. 6(1)(f), legitimate interest), and to meet legal obligations such as accounting (Art. 6(1)(c)). Website updates are sent only with your consent (Art. 6(1)(a)); you can withdraw it at any time by email.

4. Cookies. The website and the platform set only the cookies needed to run them: the session cookie, the CSRF token and, if you choose it, the remember-me cookie. There is no analytics, advertising or third-party tracking.

5. Recipients. Personal data is processed on our servers and in the image store, which are run by hosting and object storage providers under data processing agreements. Where a provider processes data outside the European Economic Area, we rely on the safeguards the GDPR provides for such transfers. We do not sell personal data and disclose it only where the law requires.

6. Retention. Account data is kept for the term of the agreement and for the 30-day export period after its end (clause 8 of the Subscription Terms), then deleted; evaluation accounts are deleted when closed. Access and activity logs are kept for twelve months, longer only for a security incident or a legal claim. An activity log entry keeps the user's name and the action for those twelve months, also after the account is deleted. Customer images are deleted 30 days after the end of the agreement. Invoices and correspondence are kept as long as tax law requires.

7. Your rights. You may ask for access to your personal data, its rectification or erasure, a restriction of its processing, or its transfer, and you may object to processing based on our legitimate interest. Write to contact@fernsteuerung.io. You may also complain to the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy).

8. Security. All connections use TLS, passwords are stored as hashes, access is limited to the user's organisation and role, and API tokens can be revoked at any time.

9. Changes. New versions of this policy are published here with a version and date. Customers are told by email about changes that affect them.