Privacy Notice | NASGuard

This Privacy Notice explains how NASGuard (“we”, “us”, or “our”) collects, uses, stores, and shares personal data when you use our website and managed backup service. We are the data controller for the personal data we process, except where a third party acts as a controller for its own services (for example, our payment provider Paddle).

1. Data controller

The data controller responsible for your personal data is NASGuard. You can contact us at billing@nasguard.cloud.

2. Personal data we collect

We collect the following categories of personal data:

Account and contact data: name, email address, company name, and billing address.
Device and usage data: NAS device type, storage size, backup logs, and usage statistics needed to provide the Service.
Technical data: IP address, browser type, operating system, and cookie identifiers.
Communication data: messages, support tickets, and emails you send to us.
Payment data: payment transactions are handled by Paddle. We do not store full payment card details on our servers.

3. How we use your data

We use your personal data for the following purposes:

Contract performance: to create and manage your account, provide backup storage, process subscriptions, and deliver customer support.
Legitimate interests: to improve the Service, maintain security, prevent fraud, and analyse usage trends.
Legal compliance: to comply with applicable laws, regulations, and legal processes.
Consent: where required, for marketing communications or non-essential cookies. You may withdraw consent at any time.

4. Data sharing and recipients

We do not sell your personal data. We may share it with the following categories of recipients:

Merchant of Record (Paddle): for sale of the product, subscription management, payment processing, tax compliance, invoicing, and refunds. Paddle is the Merchant of Record for all orders placed through NASGuard.
Service providers: hosting, analytics, customer support, and email delivery providers that process data on our behalf under appropriate data processing agreements.
Professional advisers: legal, accounting, and insurance professionals when necessary.
Authorities: law enforcement or regulatory bodies when required by law or to protect our rights.

5. International transfers

Some of our service providers may operate outside your country of residence. When we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses or adequacy decisions, to protect your data in accordance with applicable data protection laws.

6. Data retention

We retain your personal data for as long as necessary to provide the Service, fulfill the purposes described in this Notice, and comply with legal obligations. Account data is generally retained for up to 12 months after you close your account unless a longer retention period is required by law. Backup data is deleted in accordance with our data retention schedule after account closure.

7. Your rights

Depending on your location, you may have the following rights:

Access your personal data and receive a copy.
Rectify inaccurate or incomplete data.
Request erasure of your personal data.
Restrict or object to certain processing activities.
Request data portability.
Withdraw consent where processing is based on consent.
Lodge a complaint with a supervisory authority.

To exercise your rights, contact us at billing@nasguard.cloud. We will respond within one month, or longer if permitted by law.

8. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security.

9. Cookies

We use essential cookies to operate the website and optional analytics cookies to understand how visitors use the site. Essential cookies cannot be disabled. You can manage your preferences for non-essential cookies through your browser settings. For more information, please contact us.

10. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use of the Service after changes become effective constitutes acceptance of the revised Notice.

11. Contact us

If you have any questions about this Privacy Notice or our data practices, please contact us at billing@nasguard.cloud.