Privacy Policy

This policy describes how Sandman (“we”, “us”) handles personal data in connection with the Sandman software, Azure Marketplace offers, and the sandmancloud.com website.

1. Self-hosted product

Sandman runs on a virtual machine in your Azure subscription. Operational data (VM inventory, schedules, user assignments, audit logs, session data) is stored in your environment (PostgreSQL, Valkey, and local disk on the appliance). We do not operate a multi-tenant SaaS backend that receives this data by default.

You (the customer organisation) are typically the data controller for personal data processed by Sandman in your tenant (for example directory user names and emails used for login and Teams notifications). Your GDPR obligations depend on where you deploy Sandman, your Azure/Teams configuration, and your internal policies.

2. Data we may process as publisher

We may process limited personal data when you interact with us directly, for example:

Contact details and message content when you email support or sales
Billing and licensing information related to Azure Marketplace or direct contracts
Basic technical metadata you choose to share in support tickets (versions, logs with secrets removed)

We use this data to provide support, fulfil contracts, improve the product, and comply with legal obligations. We do not sell personal data.

3. Website (sandmancloud.com)

The marketing site may use third-party tools (for example a chat/messenger widget) that set cookies or process usage data according to their own policies. Static pages on this site do not require a Sandman account.

4. Legal bases (EEA/UK)

Where GDPR applies to our processing as publisher, we rely on: performance of a contract (support and licensing), legitimate interests (product security and communication), and consent where required (for example optional marketing). For data processed inside your Sandman deployment, you determine the appropriate legal bases as controller.

5. Retention

Support correspondence is retained as long as needed to resolve issues and meet legal/accounting requirements, then deleted or anonymised. Data on your Sandman appliance is retained according to your configuration and policies.

6. Your rights

Depending on applicable law, you may have rights to access, rectify, erase, restrict, or port personal data we hold about you, and to object to certain processing. Contact hello@sandmancloud.com. You may also lodge a complaint with your supervisory authority.

7. Contact

Sandman
Kurzova 2222/16, Stodůlky, 155 00 Praha, Czech Republic
hello@sandmancloud.com