1. Overview and Principles

At INCONTROL PLUS, we prioritize data privacy and sovereignty. As an open-source infrastructure provider, OpenBalancer is engineered specifically to ensure that all payload data stays entirely within your own self-hosted or dedicated infrastructure.

2. Information We Collect

2.1. Website Visitors: We collect standard, non-personally identifiable technical telemetry when you browse openbalancer.com (e.g., browser type, operating system, approximate geographic region) for security and performance optimization via Cloudflare.

2.2. B2B Clients & Invoicing: When contracting for enterprise services or SLAs, we collect necessary business contact information (company name, corporate address, VAT ID, authorized representative name, business email, and phone number) required for billing, contracting, and Stripe transaction verification.

2.3. OpenBalancer Core Telemetry: The self-hosted open-source version of OpenBalancer does not transmit any payload data, user credentials, or application traffic to INCONTROL PLUS servers.

3. Legal Basis for Processing

We process your personal data under the following legal bases pursuant to Article 6 of the GDPR:

4. Third-Party Service Providers

We partner only with reputable, GDPR-compliant infrastructure and payment processors:

5. Your Rights Under GDPR

As an EU data subject, you hold the right to access, rectify, or erase your personal data, the right to data portability, the right to restrict processing, and the right to object to processing. To exercise any of these rights, contact us at support@openbalancer.com.

6. Data Retention

Corporate billing records and invoices are retained for the statutory period required under Bulgarian commercial and tax law (10 years). Technical server logs are purged every 30 days.