1. Who we are
dflux Ltd ("dflux", "we", "us"), a company in Israel, operates bastn.ai. dflux is the controller of the personal data described here. Contact comms@dflux.io.
2. What this policy covers
This policy covers the bastn.ai website, the access form, and online orders placed through Paddle. bastn is self-hosted: the software runs in your network. Agent calls, tool results, audit logs and credentials stay there. dflux does not receive that data unless you choose to send it, for example in a support email.
3. What we collect
When you request access we collect your name, work email, company, and whatever you write about the systems your agents touch. Please do not put secrets or other people’s personal data in that field.
Our host records technical logs such as IP address, browser type, the page requested and the time. We use Vercel Web Analytics, which uses no cookies and shows us aggregate counts. The site sets no cookies and does no cross-site tracking.
4. Online orders
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.
Paddle processes payment details, tax and the invoice under its own privacy policy. We receive the order details we need to deliver what you bought and to handle a refund. See /refund.
5. How we use it
We use form data to reply to your access request. We use logs to run and protect the site. We use order details to deliver an order and to meet accounting duties. We do not sell personal data and we do not use it for advertising.
6. Who else sees it
Vercel hosts the site. Resend delivers access-form email to our team. Paddle is the seller of an online order. We may also disclose data if the law requires it.
7. How long we keep it
Access requests and correspondence: up to 24 months after our last contact, unless you become a customer or ask us to delete them sooner. Order records: as long as accounting and the refund window require. Server logs: for a short period on the host’s retention settings.
8. Your rights
Depending on where you live, you can ask us to access, correct, delete or export personal data, or to object to how we use it. Email comms@dflux.io. We will answer within 30 days. You can also complain to a data protection authority: in Israel, the Privacy Protection Authority.
9. Contact
Email comms@dflux.io. dflux Ltd, Israel.