1.Who we are
Netrosetta converts network switch configurations between vendors. It is not yet a registered company. Until it is, “Netrosetta”, “we” and “us” mean the individuals who operate it from Türkiye, who are the data controller for the personal data described here. You can reach us at [email protected].
2.What we collect
Only what you give us and what the service needs to work:
- Your account. Your email address and, if you sign up with a password, that password, stored only as a one-way hash that cannot be turned back into it. We also record when you created the account, confirmed your address and accepted the Terms of Use.
- What you tell us when you sign up. Your name and company and, if you choose to answer, the platforms you are migrating between, the number of devices and how you heard about us.
- Signing in with Google. Your email address and your Google account ID. Section 3 covers this in full.
- Licence requests. Your name, email address, company, tax office and tax number, billing address, the number of computers and the language you used, so that we can invoice you. Once a licence is issued we also record who it is for, how many computers it covers, until when it is paid, and the machine codes you send us from the app.
- Configurations you upload to the free trial, with the converted configuration and the report on it. These can contain details of your network, such as device names and addresses. The Terms of Use ask you to remove passwords and other credentials before you upload.
- Technical data. The network (IP) address a request came from when you ask for an email link or send a licence request, so that nobody can use our forms to flood somebody’s inbox. Our web server also keeps an access log of the address, time, page and browser of each request.
- Emails you send us. Kept as long as the conversation needs them.
The Netrosetta app you install on your own computer sends us nothing by itself: the configurations you convert with it never leave that computer. We use no analytics, advertising or tracking tools.
3.Google user data
You can sign in with your Google account instead of a password. When you do:
- What we receive. We ask Google only for your email address. Google sends us that address, whether Google has verified it, and your Google account ID. We do not ask for or receive your name, photo, contacts, files, emails or anything else in your Google account, and we never see your Google password.
- How we use it. Only to sign you in: the address identifies your Netrosetta account and the ID links your Google account to it. We do not use it for advertising, we do not sell it, and we do not use it to train artificial intelligence or machine learning models.
- How we store it. The address and the ID are stored with your account in our database, on our server in Germany. The access token Google gives us is used once, straight away, to read your address, and is not stored.
- Who we share it with. Nobody, apart from the provider that hosts our server (section 6) and where the law requires us to.
- How to remove it. Ask us to delete your account (section 9) and the address and ID go with it. You can also remove Netrosetta’s access at any time in your Google account, at myaccount.google.com/connections.
Netrosetta’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4.How we use it, and on what legal basis
We collect personal data electronically: through the forms on our website, from Google when you choose to sign in with it, from the emails you send us, and automatically on our server when you use the service. We use it:
- to open and run your account, sign you in, send the emails an account needs (confirming your address, resetting your password) and convert the configurations you upload, because this is necessary to provide the service you signed up for (KVKK Article 5(2)(c));
- to answer licence requests, invoice you and issue your licence, for the same reason and because tax law requires us to keep invoice records (Article 5(2)(ç));
- to protect the service against abuse, and to improve the converter from the configurations and answers you give us, in our legitimate interest, provided it does not harm your fundamental rights and freedoms (Article 5(2)(f)).
We send no newsletters or marketing email. We do not sell personal data, show advertising, or make decisions about you by automated means.
7.How long we keep it
- Your account and what you told us at sign-up: until you ask us to delete it.
- Uploaded configurations, their results and reports: twelve months from upload, then deleted automatically.
- Sign-in sessions: 30 days at most.
- Links we email you: they stop working after two days (confirming an address) or two hours (resetting a password).
- The network address kept with an email link or a licence request: deleted within two days.
- Our web server’s access log: used only to look into faults and abuse; older entries are deleted as the log fills.
- Licence requests, invoices and licence records: as long as Turkish tax and commercial law requires us to keep them.
Copies in routine backups may remain for a short further period, until those backups are overwritten.
8.How we protect it
Everything between your browser and our server is encrypted (HTTPS). Passwords are stored only as one-way hashes, and the links and sign-in sessions we issue only as digests, so a copy of our database would not let anybody into an account. Access to the server is limited to the people who operate Netrosetta.
9.Your rights
Under Article 11 of KVKK you have the right to:
- learn whether we process personal data about you;
- ask for information about it if we do;
- learn why we process it and whether it is used for that purpose;
- know the third parties, in Türkiye or abroad, to whom it is transferred;
- have it corrected if it is incomplete or wrong;
- have it deleted or destroyed under the conditions in Article 7 of KVKK;
- have the third parties it was transferred to told of any correction or deletion;
- object to a result against you that comes solely from automated analysis of your data;
- claim compensation if you suffer damage because it was processed unlawfully.
To use any of these rights, or to have your account deleted, write to [email protected] from the address on your account. We answer free of charge within 30 days. Deleting your account deletes it and what you told us at sign-up; we keep only what the law requires us to, such as invoice records. If you are not satisfied with our answer, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).
10.Children
Netrosetta is a tool for network professionals and is not meant for anyone under 18. We do not knowingly collect personal data about children.
11.Changes to this policy
When this policy changes we update it here and change the date at the top. If a change affects how we use data you have already given us, we tell account holders by email before it takes effect.
12.Contact
Questions about this policy or your personal data: [email protected].