Privacy Policy

1. Introduction

NetViper ("we", "our", or "us"), operating the Keryx file transfer platform, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use the Keryx platform and related services (collectively, the "Services"). By using the Services, you consent to the data practices described in this policy.

This policy complies with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Information We Collect

2.1 Personal Information

We collect personally identifiable information that you voluntarily provide when you:

• Create an account or register your organisation
• Purchase a subscription or activate a license
• Fill out contact or support forms
• Submit a GDPR data request
• Subscribe to communications

2.2 Automatically Collected Information

When you visit our website or use the Services, we automatically collect certain information, including:

• IP address and geolocation data
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referral source and exit pages
• Device identifiers and network information
• Bandwidth usage and transfer metadata (not file content)

2.3 Cookies and Tracking Technologies

We use cookies to enhance your experience and for security monitoring. You can manage cookie preferences through our cookie consent banner. See Section 9 for details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Services
• To process subscriptions, billing, and bandwidth tracking
• To respond to inquiries and provide customer support
• To send administrative information, updates, and security alerts
• To monitor and analyse usage patterns for service improvement
• To detect, prevent, and address security threats and abuse
• To enforce our Terms of Service and protect our legal rights
• To comply with legal obligations and respond to lawful requests
• To send marketing communications (with your consent)

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Consent: You have given explicit consent for specific processing purposes (e.g. marketing communications)
• Contract: Processing is necessary to fulfil our service agreement with you (e.g. account management, billing)
• Legal Obligation: Processing is required to comply with legal obligations
• Legitimate Interests: Processing is necessary for security monitoring, threat detection, fraud prevention, and service operation. Analytics data collection falls under this basis as it is essential for security and service integrity

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

5.1 Service Providers

We share data with trusted third-party providers who assist in operating the Services (e.g. hosting, payment processing, analytics). These providers are contractually obligated to protect your data.

5.2 Legal Requirements

We may disclose information if required by law or in response to valid requests by public authorities.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity with prior notice.

5.4 Protection of Rights

We may disclose information when necessary to investigate illegal activities, suspected fraud, violations of our Terms, or to protect the safety and rights of NetViper, our users, or the public.

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal information, including:

• End-to-end encryption of file transfer content
• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure server infrastructure and databases
• Access controls and authentication mechanisms
• Regular security monitoring and threat detection
• IP-based abuse prevention and rate limiting

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Retention periods vary based on:

• The nature of the information collected
• The purpose for which it was collected
• Legal, regulatory, or contractual obligations
• Legitimate business interests (e.g. fraud prevention, dispute resolution)

When data is no longer needed, we securely delete or anonymise it.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Request restriction of processing under certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please visit our GDPR Rights page or contact us at support@netviper.gr. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies to enhance your browsing experience, ensure security, and analyse website traffic.

9.1 Necessary Cookies

Required for the website and Services to function properly (e.g. authentication, security features, CSRF protection, cookie consent preferences). These cannot be disabled.

9.2 Analytics Cookies

Required for security monitoring, threat detection, and service operation. Analytics data collection is mandatory and covered under our legitimate interest basis (GDPR Article 6(1)(f)). This data helps us detect and prevent abuse, monitor service health, and improve the platform.

9.3 Marketing Cookies

Optional cookies that enable personalised content and communications. You may opt out of marketing cookies via the cookie consent banner.

9.4 Managing Cookies

You can manage cookie preferences through our cookie consent banner. Note that necessary and analytics cookies are required to use the Services. If you do not agree to analytics data collection, your recourse is to discontinue use of the Services and request deletion of your data.

10. Third-Party Links

Our website may contain links to third-party websites. We have no control over and assume no responsibility for their content, privacy policies, or practices.

11. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence. When transferring data internationally, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or other approved mechanisms.

12. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

13. Marketing Communications

With your consent, we may send marketing emails about our products and services. You can opt out at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at support@netviper.gr
• Updating your communication preferences in your account settings

Essential service communications (security alerts, billing notices) cannot be opted out of.

14. Changes to This Policy

We may update this Privacy Policy at any time. When we make material changes, we will update the date at the top of this page and provide at least 30 days' notice for significant changes affecting your rights. Your continued use of the Services constitutes acceptance of the revised policy.

15. Data Protection Officer

For questions about this Privacy Policy or to exercise your GDPR rights, contact our Data Protection Officer:

NetViper Data Protection Officer
Email: support@netviper.gr
Subject Line: "Data Privacy Inquiry"

16. Contact Information

If you have questions or concerns regarding this Privacy Policy, please contact us at:

NetViper
Email: support@netviper.gr
Website: https://keryx.dev
Location: Athens, Greece

17. Supervisory Authority

If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority. For Greece, this is the Hellenic Data Protection Authority (HDPA).