Privacy Policy — FEDCEN

We only collect the minimum personal data required for the MVP to function:

• Name (optional)
• Email address
• Password (hashed and salted)
• IP address
• Usage logs (basic system events)
• Organization details (if provided)

We do not collect sensitive personal data.

We process personal data for the following purposes:

• Creating and managing user accounts
• Providing access to the FEDCEN platform
• Ensuring platform security and preventing misuse
• Improving system performance and reliability
• Communicating essential service updates

We do not sell or share personal data with third parties for marketing.

We process personal data under the following GDPR bases:

• Contract — to provide access to the platform
• Legitimate Interest — to maintain security and improve performance
• Consent — for optional features (e.g., analytics, if enabled)

We implement industry‑standard security measures:

• Encrypted data transmission (HTTPS)
• Password hashing (bcrypt/Argon2)
• Access control and logging
• Secure server infrastructure

Personal data is stored within the EU or with providers offering GDPR‑compliant safeguards.

We retain personal data only as long as necessary:

• User accounts: until deleted by the user
• Logs: up to 90 days
• Backups: limited retention for security purposes

Under GDPR, you have the right to:

• Access your data
• Correct your data
• Delete your data
• Export your data
• Withdraw consent (if applicable)
• Object to certain processing

Requests can be sent to: info@fedcen.eu

If used, third‑party services (e.g., hosting, email delivery, analytics) are GDPR‑compliant and process data only on our behalf.

If analytics or tracking tools are enabled, we will request consent before activating cookies. Essential cookies may be used for security and login functionality.

We may update this Privacy Policy as the platform evolves. Updates will be posted on this page.