Privacy Policy

How Grado Technologies handles inquiries and optional website analytics for Soar MDM.

Who is responsible

Grado Technologies, the team behind Soar MDM, is responsible for the information collected through this marketing website. For privacy questions and requests, email customers@gradotech.eu. This policy concerns the website, rather than data processed by a customer’s Soar MDM deployment, which is governed by its own agreements and notices.

Information you send us

The contact and demo forms send your email address, inquiry topic, message, inquiry type and reference number to our team through Gmail. Email delivery also creates a delivery timestamp. We use these details to respond, evaluate your requirements and discuss a possible business relationship. Sending an inquiry does not subscribe you to marketing.

We process requested pre-contract discussions where necessary to take steps at your request, and other business correspondence based on our legitimate interest in answering relevant inquiries. Please do not send passwords, API keys, payment details or confidential device data through these forms.

Optional analytics and IP journeys

Analytics is off until you choose “Accept analytics.” If you consent, we store your full IP address, approximate country, a random session identifier, the visited page path, referring website origin, event type and timestamp, and selected interactions. These include navigation clicks, feature and hosting choices, licensing control changes, scroll milestones and successful inquiry events. The dashboard can group this activity by IP address and browser-tab session.

We do not store form contents, typed field values, URL query strings, URL fragments, referrer paths, precise location, screen recordings or advertising profiles in analytics. An inquiry success event contains only whether it was a contact or demo request, with no email address, message or inquiry reference. IP-based country lookup happens locally on our server. IP location is approximate, and shared networks and VPNs mean an IP is not a reliable identifier of an individual.

Our lawful basis for optional analytics is your consent. Rejecting optional analytics keeps collection off and does not restrict access to the site or forms. We also disable collection when your browser sends Global Privacy Control or Do Not Track. Admin pages are excluded. Administrators can blacklist an IP, which deletes its analytics history and prevents further analytics collection while the exclusion remains in place.

Change your choice

lets you accept or reject analytics at any time. Withdrawing consent stops new collection and removes the analytics session identifier from your browser. It does not automatically erase earlier events or recall a request already in transit; you can ask us to erase previous data. Your choice lasts 180 days, after which we ask again. Clearing your browser cookies also clears this choice.

Necessary operation and security

Our servers necessarily receive an IP address to deliver the website. We use temporary login-attempt counters and submission rate limits to protect the services. These are separate from optional analytics and operate even if you reject tracking. Admin access uses a secure session cookie. We rely on our legitimate interest in operating and protecting the website for this processing.

Storage, recipients and retention

Analytics is held in our deployment’s PostgreSQL database and is accessible through a password-protected admin dashboard. Events are retained for up to 90 days; an hourly cleanup removes older records. IP exclusions remain until an administrator removes them. Admin sessions expire after eight hours; temporary login-attempt counters expire after 15 minutes.

Inquiries are delivered through Gmail to our team’s inbox and are not saved in this website’s database. Correspondence is retained for as long as needed to handle the inquiry and any resulting business relationship, and where needed to meet applicable legal obligations or resolve disputes. Contact us for details about your correspondence or to request removal.

Our hosting and email providers process information to operate their services. Gmail processing may involve countries outside the European Economic Area, subject to the provider’s applicable data protection arrangements. The analytics implementation does not send your IP address to an external geolocation or advertising service. Infrastructure operated outside this application, such as an upstream proxy or host, may keep separate operational or security logs under its own retention settings.

Your rights

Depending on the circumstances and applicable law, you may request access, correction, erasure, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time without affecting earlier lawful processing. You may complain to your local data protection supervisory authority. In Bulgaria this is the Commission for Personal Data Protection.

Email customers@gradotech.eu with enough information to identify the relevant inquiry or analytics records, such as an inquiry reference or IP address and approximate visit time. We may need reasonable verification before disclosing or deleting information. We do not make automated decisions producing legal or similarly significant effects about website visitors.

Changes and related information

We will update this page and its effective date when our practices change. See the Cookie Policy for browser storage details and the Terms of Service for website use.