Terms & Conditions

We value your data and we protect it. We will never spam your emails.

Security Policy

We enable our customers to focus on their apps without worrying about infrastructure, scaling, security, and ops. The GPTboost™ platform protects customers from threats by employing strict security controls at every layer from physical to application level. The GPTboost™ team can rapidly deploy security updates to keep customer applications protected.

Security Assessments and Compliance

DATA CENTERS

GPTboost™’s physical infrastructure for the EU region is hosted and managed in the Scaleway’s Iliad Datacenter in Paris, France, which has been accredited under ISO 27001, 50001, HDS, pci-DSS. The datacenter is protected by biometric access control systems and by 24/7 on-site technical and security staff.

For the North America region, our infrastructure is hosted and managed in the OVH datacenters in Beauharnois, Montreal Canada. OVH’s data center operations have been accredited under ISO/IEC 27001:2013 certification for the Information Security Management System of Dedicated Servers, PCI-DSS Level 1, SOC1 and SOC2, and CSA.

All OVHcloud dedicated servers include optimum anti-DDoS technology to provide the best protection against complex and sophisticated attacks and ensure business continuity.

For the rest of the available regions, GPTboost™'s physical infrastructure is hosted and managed within Amazon’s secure data centers and utilize the Amazon Web Service (AWS) technology. Amazon continually manages risk and undergoes recurring assessments to ensure compliance with industry standards. Amazon’s data center operations have been accredited under:

1. ISO 27001

2. SOC 1/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)

3. PCI Level 1

4. FISMA Moderate

5. Sarbanes-Oxley (SOX)

6. PCI

We use payment processor Braintree for encrypting and processing credit card payments. Braintree is a validated Level 1 PCI DSS Compliant Service Provider.

PHYSICAL SECURITY

GPTboost™ utilizes ISO 27001 certified data centers managed by Amazon, Scaleway and OVH (the "Infrastructure Partners"). Our Infrastructure Partners have many years of experience in designing, constructing, and operating large-scale data centers. This experience has been applied to the AWS, Scaleway, and OVH platforms and infrastructures. The Infrastructure Partners data centers are housed in nondescript facilities, and critical facilities have extensive setback and military grade perimeter control berms as well as other natural boundary protection. Physical access is strictly controlled both at the perimeter and at building ingress points by professional security staff utilizing video surveillance, state of the art intrusion detection systems, and other electronic means. Authorized staff must pass two-factor authentication no fewer than three times to access data center floors. All visitors and contractors are required to present identification and are signed in and continually escorted by authorized staff.

Our Infrastructure Partners provide data center access and information to employees who have a legitimate business need for such privileges. When an employee no longer has a business need for these privileges, his or her access is immediately revoked, even if they continue to be an employee of the company.

All physical and electronic access to data centers by the Infrastructure Partners is logged and audited routinely.

For additional information see:

Environmental Safeguards

FIRE DETECTION AND SUPPRESSION

Automatic fire detection and suppression equipment has been installed to reduce risk. The fire detection system utilizes smoke detection sensors in all data center environments, mechanical and electrical infrastructure spaces, chiller rooms and generator equipment rooms. These areas are protected by either wet-pipe, double-interlocked pre-action, or gaseous sprinkler systems.

POWER

The data center electrical power systems are designed to be fully redundant and maintainable without impact to operations, 24 hours a day, and seven days a week. Uninterruptible Power Supply (UPS) units provide back-up power in the event of an electrical failure for critical and essential loads in the facility. Data centers use generators to provide backup power for the entire facility.

CLIMATE AND TEMPERATURE CONTROL

Climate control is required to maintain a constant operating temperature for servers and other hardware, which prevents overheating and reduces the possibility of service outages. Data centers are conditioned to maintain atmospheric conditions at optimal levels. Monitoring systems and data center personnel ensure temperature and humidity are at the appropriate levels.

MANAGEMENT

Data center staff monitor electrical, mechanical and life support systems and equipment so issues are immediately identified. Preventative maintenance is performed to maintain the continued operability of equipment.

Network Security

FIREWALLS

Firewalls are utilized to restrict access to systems from external networks and between systems internally. By default all access is denied and only explicitly allowed ports and protocols are allowed based on business need. Each system is assigned to a firewall security group based on the system’s function. Security groups restrict access to only the ports and protocols required for a system’s specific function to mitigate risk.

Host-based firewalls restrict customer applications from establishing localhost connections over the loopback network interface to further isolate customer applications. Host-based firewalls also provide the ability to further limit inbound and outbound connections as needed.

DDOS MITIGATION

Our infrastructure provides DDoS mitigation techniques including TCP Syn cookies and connection rate limiting in addition to maintaining multiple backbone connections and internal bandwidth capacity that exceeds the Internet carrier supplied bandwidth. We work closely with our providers to quickly respond to events and enable advanced DDoS mitigation controls when needed.

SPOOFING AND SNIFFING PROTECTIONS

Managed firewalls prevent IP, MAC, and ARP spoofing on the network and between virtual hosts to ensure spoofing is not possible. Packet sniffing is prevented by infrastructure including the hypervisor which will not deliver traffic to an interface which it is not addressed to. GPTboost™ utilizes application isolation, operating system restrictions, and encrypted connections to further ensure risk is mitigated at all levels.

PORT SCANNING

Port scanning is prohibited and every reported instance is investigated by our infrastructure provider. When port scans are detected, they are stopped and access is blocked.

Data Security

Customer data is stored in separate access-controlled databases per application. Customers with multiple applications are assigned separate databases per application to mitigate the risk of unauthorized access between applications inside and outside the European Union depending which region you have chosen for you Application.

System Security

SYSTEM CONFIGURATION

System configuration and consistency is maintained through standard, up-to-date images, configuration management software, and by replacing systems with updated deployments. Systems are deployed using up-to-date images that are updated with configuration changes and security updates before deployment. Once deployed, existing systems are decommissioned and replaced with up-to-date systems.

SYSTEM AUTHENTICATION

Operating system access is limited to GPTboost™ staff and requires username and key authentication. Operating systems do not allow password authentication to prevent password brute force attacks, theft, and sharing.

VULNERABILITY MANAGEMENT

Our vulnerability management process is designed to remediate risks without customer interaction or impact. GPTboost™ is notified of vulnerabilities through internal and external assessments, system patch monitoring, and third party mailing lists and services. Each vulnerability is reviewed to determine if it is applicable to GPTboost™’s environment, ranked based on risk, and assigned to the appropriate team for resolution.

Backups

APPLICATION DATABASES

You are solely responsible for backing up your Applications Databases if automatic database backups provided as an additional service are not activated manually by yourself.

AUTOMATIC APPLICATION DATABASES BACKUPS

  • The automatic application database backups are an additional paid service provided by GPTboost.
  • GPTboost backs up every database with active automatic application database backups once a day and retains the application database backup for 30 days.
  • The automatic application database backups should be activated manually by the customer for every application separately.
  • Restore of a database should be scheduled by the customer from their GPTboost Dashboard.
  • If you want to cancel the automatic application database backups you should do it manually for every application separately.
    Once a cancelation request is sent the backups will be scheduled for deactivation and will stop working on the next billing date.

APPLICATION CONFIGURATIONS

All of your application configuration is snapshotted every six hours. GPTboost™ can restore configuration from the last snapshot if data loss occurs.

Disaster Recovery

APPLICATION DATABASES AND CONFIGURATIONS

Our platform automatically restores customer applications and databases in the case of an outage.

GPTboost™ PLATFORM

The GPTboost™ platform is designed for stability, scaling, and inherently mitigates common issues that lead to outages while maintaining recovery capabilities. Our platform maintains redundancy to prevent single points of failure, is able to replace failed components, and utilizes multiple data centers designed for resiliency. In the case of an outage, the platform is deployed across multiple data centers using current system images and data is restored from disaster recovery backups. GPTboost™ reviews platform issues to understand the root cause, impact to customers, and improve the platform and processes.

Access to Customer Data

GPTboost™ staff does not access or interact with customer data or applications as part of normal operations. There may be cases where GPTboost™ is requested to interact with customer data or applications at the request of the customer for support purposes or where required by law. GPTboost™ may also inspect customer data to debug and troubleshoot platform issues.

These Terms of Service have been last amended on 24 May 2018

Privacy Policy

1. Web Site Covered

This Privacy Statement covers the information practices of https://www.gptboost.io and is subject to GPTboost™'s Terms of Service and Privacy Notice

2. Information Collected

GPTboost™ offers a variety of services that are collectively referred to as the "Services." GPTboost™ collects information from individuals who visit the Company’s Web site ("Visitors") and individuals who register to use the Services ("Customers").

When expressing an interest in obtaining additional information about the Services or registering to use the Services, GPTboost™ requires you to provide the Company with personal contact information, such as name, company name, address, phone number, and email address ("Required Contact Information"). When purchasing the Services, GPTboost™ requires you to provide the Company with financial qualification and billing information, such as billing name and address, credit card number, and the number of employees within the organization that will be using the Services ("Billing Information"). GPTboost™ may also ask you to provide additional information, such as company annual revenues, number of employees, or industry, or you may choose to provide information about the end users of your application ("Optional Information"). Required Contact Information, Billing Information, and Optional Information, are referred to collectively as "Data About GPTboost™ Customers."

Please, have in mind that not all information which GPTboost™ collects and processes is considered personal data, for instance details about companies, working e-mails, etc. Personal data is only the information relating to an identified or identifiable natural person.

The personal data which GPTboost™ collects and processes, the grounds and purposes of such processing, the rights of the data subjects and other relevant information is included in GPTboost™’s Privacy Notice.

As you navigate the Company’s Web site, GPTboost™ may also collect information through the use of commonly-used information-gathering tools, such as cookies and Web beacons ("Web Site Navigational Information"). Web Site Navigational Information includes standard information from your Web browser (such as browser type and browser language), your Internet Protocol ("IP") address, and the actions you take on the Company’s Web site (such as the Web pages viewed and the links clicked).

CloudStrap AD is registered as a personal data administrator with the Commission for Personal Data Protection under № 421129.

Commission for Personal Data Protection

Address: Sofia 1592 Prof. Tsvetan Lazarov Str. № 2,

tel.: (02) 940 20 46, fax: (02) 940 36 40

Email: kzld@government.bg, kzld@cpdp.bg

Website: www.cpdp.bg

3. Use of Information Collected

The Company uses Data About GPTboost™ Customers to perform and support the services. For example, if you fill out a "Contact Me" Web form, the Company will use the information provided to contact you about your interest in the Services.

The Company may also use Data About GPTboost™ Customers for marketing purposes if you have expressed your wish and consent for this. For example, the Company may use information you provide to contact you to further discuss your interest in the Services and to send you information regarding the Company and its partners, such as information about promotions or events.

GPTboost™ uses credit card information solely to check the financial qualifications of prospective Customers and to collect payment for the Services. GPTboost™ uses Web Site Navigational Information to operate and improve the Company’s Web site. The Company may also use Web Site Navigational Information alone or in combination with Data About GPTboost™ Customers to provide personalized information about the Company.

4. Web Site Navigational Information

GPTboost™ uses commonly-used information-gathering tools, such as cookies and Web beacons, to collect information as you navigate the Company’s Web site ("Web Site Navigational Information"). This section describes the types of Web Site Navigational Information that may be collected on the Company’s Web site and how this information may be used.

4.1 Cookies - GPTboost™ uses cookies to make interactions with the Company’s Web site easy and meaningful. When you visit the Company’s Web site, GPTboost™’s servers send a cookie to your computer. Standing alone, cookies do not personally identify you. They merely recognize your Web browser. Unless you choose to identify yourself to GPTboost™, either by responding to a promotional offer, opening an account, or filling out a Web form (such as a "Contact Me" or a "30 Day Free Trial" Web form), you remain anonymous to the Company. GPTboost™ uses cookies that are session-based and persistent-based. Session cookies exist only during one session. They disappear from your computer when you close your browser software or turn off your computer. Persistent cookies remain on your computer after you close your browser or turn off your computer.

If you have chosen to identify yourself to GPTboost™, the Company uses session cookies containing encrypted information to allow the Company to uniquely identify you. Each time you log into the Services, a session cookie containing an encrypted, unique identifier that is tied to your account is placed your browser. These session cookies allow the Company to uniquely identify you when you are logged into the Services and to process your online transactions and requests. Session cookies are required to use the Services.

GPTboost™ uses persistent cookies that only the Company can read and use to identify browsers that have previously visited the Company’s Web site. When you purchase the Services or provide the Company with personal information, a unique identifier is assigned you. This unique identifier is associated with a persistent cookie that the Company places on your Web browser. The Company is especially careful about the security and confidentiality of the information stored in persistent cookies. For example, the Company does not store account numbers or passwords in persistent cookies. If you disable your Web browser’s ability to accept cookies, you will be able to navigate the Company’s Web site, but you will not be able to successfully use the Services.

GPTboost™ may use information from session and persistent cookies in combination with Data About GPTboost™ Customers to provide you with information about the Company and the Services.

4.2 Web Beacons - GPTboost™ uses Web beacons alone or in conjunction with cookies to compile information about Customers and Visitors’ usage of the Company’s Web site and interaction with emails from the Company. Web beacons are clear electronic images that can recognize certain types of information on your computer, such as cookies, when you viewed a particular Website tied to the Web beacon, and a description of a Web site tied to the Web beacon. For example, GPTboost™ may place Web beacons in marketing emails that notify the Company when you click on a link in the email that directs you to one of the Company’s Web site. GPTboost™ uses Web beacons to operate and improve the Company’s Web site and email communications.

GPTboost™ may use information from Web beacons in combination with Data About GPTboost™ Customers to provide you with information about the Company and the Services.

4.3 Flash Cookies - GPTboost™ may use local shared objects, also known as Flash cookies, to store your preferences or display content based upon what you view on our site to personalize your visit. Third parties, with whom the Company partners to provide certain features on our site or to display advertising based upon your Web browsing activity, use Flash cookies to collect and store information.

Flash cookies are different from browser cookies because of the amount of, type of, and how data is stored. Cookie management tools provided by your browser will not remove Flash cookies.

4.4 IP Addresses - When you visit GPTboost™’s Web site, the Company collects your Internet Protocol ("IP") addresses to track and aggregate non-personal information. For example, GPTboost™ uses IP addresses to monitor the regions from which Customers and Visitors navigate the Company’s Web site.

4.5 Third Party Cookies - From time-to-time, GPTboost™ engages third parties to track and analyze usage and volume statistical information from individuals who visit the Company’s Web site. GPTboost™ may also use other third-party cookies to track the performance of Company advertisements. The information provided to third parties does not include personal information, but this information may be re-associated with personal information after the Company receives it.

GPTboost™ may also contract with third-party advertising networks that collect IP addresses and other Web Site Navigational Information on the Company’s Web site and emails and on third-party Web sites. Ad networks follow your online activities over time by collecting Web Site Navigational Information through automated means, including through the use of cookies. They use this information to provide advertisements about products and services tailored to your interests. You may see these advertisements on other Web sites. This process also helps us manage and track the effectiveness of our marketing efforts.

5. Public Forums, Refer a Friend, and Customer Testimonials

GPTboost™ may provide bulletin boards, blogs, or chat rooms on the Company’s Web site. Any personal information you choose to submit in such a forum may be read, collected, or used by others who visit these forums, and may be used to send you unsolicited messages. GPTboost™ is not responsible for the personal information you choose to submit in these forums.

GPTboost™ may post a list of Customers and testimonials on the Company’s Web site that contain information such as Customer names and titles. GPTboost™ obtains the consent of each Customer prior to posting any information on such a list or posting testimonials.

6. Sharing of Information Collected

GPTboost™ may share Data About GPTboost™ Customers with the Company’s service providers, vendors and other partners so that they can support the services you use and contact Customers and Visitors who have provided contact information on our behalf. GPTboost™ may also share Data About GPTboost™ Customers with the Company’s service providers, vendors and other partners to ensure the quality of information provided. Unless described in this privacy statement, GPTboost™ does not share, sell, rent, or trade any information provided with third parties for their promotional purposes.

From time to time, GPTboost™ may partner with other companies to jointly offer products or services. If you purchase or specifically express interest in a jointly-offered product or service from GPTboost™, the Company may share Data About GPTboost™ Customers collected in connection with your purchase or expression of interest with our joint promotion partner(s). GPTboost™ does not control our business partners’ use of the Data About GPTboost™ Customers we collect, and their use of the information will be in accordance with their own privacy policies. If you do not wish for your information to be shared in this manner, you may opt not to purchase or specifically express interest in a jointly offered product or service.

GPTboost™ uses a third-party service provider to manage credit card processing. This service provider is not permitted to store, retain, or use Billing Information except for the sole purpose of credit card processing on the Company’s behalf.

GPTboost™ reserves the right to use or disclose information provided if required by law or if the Company reasonably believes that use or disclosure is necessary to protect the Company’s rights and/or to comply with a judicial proceeding, court order, or legal process.

7. Communications Preferences

GPTboost™ offers Customers and Visitors who provide contact information a means to choose how the Company uses the information provided. You may manage your receipt of marketing and non-transactional communications by clicking on the "unsubscribe" link located on the bottom of the Company’s marketing emails. Additionally, you may send a request specifying your communications preferences to hello@GPTboost.io. Customers cannot opt out of receiving transactional emails related to their account with GPTboost™ or the Services.

8. Correcting and Updating Your Information

Customers may update or change their registration information by logging in to their accounts at https://www.gptboost.io. Requests to access, change, or delete your information will be handled within 30 days.

9. Security

GPTboost™ uses appropriate administrative, technical, and physical security measures to protect Data About GPTboost™ Customers.

10. Changes to this Privacy Statement

GPTboost™ reserves the right to change this Privacy Statement. GPTboost™ will provide notification of the material changes to this Privacy Statement through the Company’s Web site at least thirty (30) business days prior to the change taking effect.

11. Contacting Us

If you have questions or complaints regarding our Privacy Statement or practices, please contact us by mail. If you are located in BG or EU, our mailing address is CloudStrap AD., 1000 3, Angel Kanchev str., Sofia, Bulgaria. You may also contact us at hello@GPTboost.io.

GDPR Privacy Notice

Information about the Data controller

Legal name CloudStrap ADUIN/BULSTAT204018250

Seat and registered office3 Angel Kanchev Str., office 1, 1000 Sofia

Address of correspondence3 Angel Kanchev Str., office 1, 1000 SofiaTelephone-E-mailhello@GPTboost.io

Registration Number at the Bulgarian Data Protection Commission421129

Information about the Supervisory authority

Legal name Commission for personal data protection

Seat and registered office2 Prof. “Tsvetan Lazarov” Blvd., Sofia 1592, Bulgaria

Address of correspondence2 Prof. “Tsvetan Lazarov” Blvd., Sofia 1592, BulgariaTelephone+3592/91-53-518

Websitewww.cpdp.bg

Art. 1. The basis for the collection, processing and storage of your personal data

1 GPTboost™ collects and processes your personal data under Art. 6, para. 1, Regulation (EU) 2016/679, and in particular under the following:

  • Obtained explicit consent from you as a user of the service/client;
  • Performance of GPTboost™’s obligations under a Contract with you;
  • Processing is necessary for compliance with a legal obligation to which GPTboost™ is subject;
  • Processing is necessary in order to protect the vital interests of you or of another natural person;
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • Processing is necessary for the purposes of the legitimate interests pursued by GPTboost™ or by a third party.

2 GPTboost™ acts as a data controller with regard to your personal data as our Customer and as a data processor with regard to the personal data of third parties which we process as a part of the Service we provide to You.

Art. 2. Objectives and principles in the course of collection, processing and storage of your personal data

1 GPTboost™ collects and processes the personal data which you as our client provide, for the purposes of performance of a contract, including the following purposes:

  • registration at GPTboost™’s website via creating a user account and ensuring its full functionality;
  • accounting purposes;
  • statistical purposes;
  • protection of information security;
  • securing the performance of the contract for provision of the service concerned;
  • optimization of the provided service;
  • sending newsletters, service announcements, recommendations to improve the use of the platform, new and upgraded subscription plans, etc.;
  • improvement and personalization of your service by providing offers, ads, promotional campaigns, events, and other products and services that are subject to your interest;
  • dispute resolution between you and third parties.

2 GPTboost™ collects and processes the personal data which you provide as a legal representative of a company with which we conclude a contract, for the purposes of individualization of our contractual partner and performance of the contract.

3 GPTboost™ adheres to the following Principles in the course of processing of your personal data:

  • lawfulness, fairness and transparency;
  • purpose limitation of the processing personal data;
  • data minimization;
  • accuracy;
  • storage limitation;
  • integrity and confidentiality.

4 In the course of processing and storage of personal data, GPTboost™ is entitled to process and keep personal data for the purposes of protection of the following legitimate interests:

  • to perform its obligations towards state and municipal bodies and perform its obligations under the applicable legislation and regulations.

Art. 3. What kind of data do we collect, process and keep?

1 GPTboost™ carries out the following operations with the personal data you provide for the following purposes:

  • Provision of technical assistance to customers through a ticketing system or call center – the operation is intended to provide a service to the customer. In some cases, the purpose of the transaction may also be to protect the legitimate interests of the company in executing the transaction.
  • We may use your name, e-mail and telephone for the provision of technical assistance as a part of our Services, on the grounds of the concluded service agreement - Art. 6, para. 1, b. (b) GDPR.
  • Conclusion and execution of a commercial transaction – the operation aims to conclude and execute a contract with a commercial partner or client and ensures its administration. In some cases, the purpose of the transaction may also be to protect the legitimate interests of the company in executing the transaction.
  • We may use your name as a legal representative for the conclusion and execution of a commercial transaction on the grounds of the concluded service agreement - Art. 6, para. 1, b. (b) GDPR.
  • Registration of a user of the services of the company – The operation is intended to provide services, including but not limited to the following: collection of data by the client for the purpose of individualization as a party to the service contract; creation of a user account for usage and management of the application creation process; acceptance of payments by the client for the services provided and billing; management of the Company’s information security in the provision of services; provision of an interface for managing the processing of personal data by the user of the service; sending of messages regarding the use of the Service, upgrade proposals, etc.
  • We use your e-mail for registration at our website and contacting you, including for sending you messages related to our Services; you can additionally provide your name and telephone number in your account once it is created;
  • We need Billing information such as your name, address, e-mail, phone, VAT ID and PIN, as well as payment method for billing purposes;
  • We process this data on the grounds of the concluded service agreement - Art. 6, para. 1, b. (b) GDPR.
  • Sending newsletters – The operation aims to send newsletters at the customer’s request, via email in the form of the website for sending messages.
  • We use your e-mail for sending you newsletters or advertising messages in case you have indicated your wish, on the grounds of your explicit consent - Art. 6, para. 1, b. (a) GDPR.

2 GPTboost™ also collects, stores and uses log-ins, cookies, IP addresses and device information pursuant to its Privacy Policy.

3 GPTboost™ reserves its right to request, collect and process other data, necessary for performing the obligations under the contract.

4 GPTboost™ doesn’t collect and process personal data, that refers to:

  • revealing racial or ethnic origin;
  • revealing political opinions, religious or philosophical beliefs, or trade union membership;
  • genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

5 Personal data is collected by GPTboost™ from the persons it refers to.

6 The company is not carrying out automated decision making with data.

7 GPTboost™ does not collect and process data of persons under the age of 13 years.

Art. 4. Duration of personal data storage

1 GPTboost™ stores your personal data for the whole period of provision of the services and after deactivation of the account - for a period no longer than 5 years, unless otherwise required by the applicable law. After the expiry of this period, GPTboost™ makes all reasonable efforts to delete and destroy or anonymize all of your personal data without undue delay.

2 GPTboost™ informs you in case that the period for the storage of the personal data is necessary to be extended in regard to performing the purposes, performing the contract, in regard to legitimate interests of the Company or other person.

3 GPTboost™ stores the personal data in accordance with the applicable law and the legal term for storage of such data could exceed the existence of the contractual relation.

Art. 5. Transmission of your personal data for processing

1 GPTboost™ is allowed on its own decision to transmit all or part of your personal data to a data processor for performing the purposes of processing, including in other countries, by complying with the requirements of Regulation (EU) 2016/679, for which you are considered informed with this Privacy notice and the publicly available list of processors used by the GPTboost™.

2 GPTboost™informs you in case of intention to transmit part or all of your personal data to third countries or international organization.

3 If you chose as a region for your Application a region outside the European Union, your data will be stored in the chosen region.

Your rights in the course of collection, processing and storage of your personal data

Art. 6. Withdrawal of the consent

1 If you no longer wish for your personal data to be processed for all or specific purposes, you may at any time withdraw your consent by filling the form in your profile or sending an e-mail with a request to GPTboost™.

2 GPTboost™ could request you to certify your identity in a manner it considers appropriate given the circumstances.

3 The withdrawal of your consent for processing of personal data which is required for maintenance of your profile on our website and use of our Services, will automatically deactivate your account. The withdrawal of your consent does not affect the legality and validity of any processing of your personal data which has been made prior to the withdrawal.

4 You may at any time withdraw your consent for processing of your personal data which is used for direct marketing purposes.

Art. 7. Right of access by the data subject

1 You have the right to obtain from GPTboost™ confirmation as to whether or not it is processing personal data concerning you, as you can at any time view all information we have for you in your details in your client’s account.

2 You have the right to obtain access to the personal data related to you, аs well as to the information regarding the collection, processing and storage of your personal data.

3 GPTboost™ provides on your request, a copy of the personal data related to you and processing in electronic or other suitable form, including through visualization in your profile.

4 The provision of access to the personal data is free, but GPTboost™ keeps his right to charge administrative fee, in case of repeatability or excessiveness of the requests.

Art. 8. Right to rectification or completion

You could at any time rectify or complete inaccurate or incomplete information concerning you directly through your account or by sending us a request via e-mail.

Art. 9. Right to erasure ("right to be forgotten")

1 You have the right to request from GPTboost™ to erase the personal data concerning you and GPTboost™ has the obligation to erase personal data without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • you withdraw your consent on which the processing is based and where there is no other legal ground for the processing;
  • you object to the processing of personal data concerning you, including for the purposes of the direct marketing and there are no overriding legitimate grounds for the processing;
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
  • the personal data have been collected in relation to the offer of information society services

2 GPTboost™ is not obliged to erase the personal data if he collects and process them:

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
  • for the establishment, exercise or defense of legal claims.

3 You can exercise your right to erasure by filling and submitting the request form in your profile or by sending an e-mail to GPTboost™, after which we could request you to certify your identity in a manner it considers appropriate given the circumstances in order to verify that you are indeed the data subject whose data should be erased.

4 GPTboost™ does not erase the personal data which it has a legal obligation to store or which is necessary for proving its legitimate rights against claims against the Company.

Art. 10. Right to restriction of processing

You have the right to obtain from GPTboost™ restriction of processing where one of the following applies:

  • you contest the accuracy of the personal data, for a period enabling GPTboost™ to verify the accuracy of the personal data;
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  • the GPTboost™ no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims;
  • you have objected to processing pending the verification whether the legitimate grounds of the GPTboost™ override those of yours.

Art. 11. Right to data portability

1 If you have given your consent for processing of your personal data or the processing is necessary for performance of a contract with GPTboost™, or your personal data is processed by automated means, you could, after identification before the GPTboost™:

  • require GPTboost™ to provide you with your personal data in readable format and to transmit those data to another controller;
  • require GPTboost™ to transmit directly your personal data to another controller, specified by you, where technically feasible.

2 You could exercise your right to data portability by using the “Export” option directly from your profile or by sending an e-mail to the controller and indicate the format in which you require the data to be transmitted, as well as to whom.

Art. 12. Right to receive information

You have the right to require GPTboost™ to inform you about all recipients, to whom your personal data, for which has been required rectification, erasure or restriction of processing, have been disclosed. GPTboost™ is allowed to refuse to provide this information if this is impossible or involves disproportionate effort.

Art. 13. Right to object

You have the right to object at any time to processing of personal data concerning you including processing for the purpose of profiling or direct marketing

Art. 14. Your rights in case of personal data breach

1 When GPTboost™ detects personal data breach, which is likely to result in a high risk to your rights and freedoms, GPTboost™ communicates the personal data breach to you without undue delay, as well as the measures taken or proposed to be taken by the Company.

2 GPTboost™ is not obliged to inform you if:

  • GPTboost™ has implemented appropriate technical and organizational protection measures, and those measures were applied to the personal data affected by the personal data breach;
  • GPTboost™ has taken subsequent measures which ensure that the high risk to your rights is no longer likely to materialize;
  • it would involve disproportionate effort.

Art. 15. Persons, to whom your personal data is provided

1 For the purpose of processing your personal data and provision of the service, the GPTboost™ is allowed to provide your personal data to data processors, for which you are considered informed with this Privacy notice and the publicly available list of processors used by the Company.

2 Designated processors comply with all requirements of legality and security in the course of processing and storage of your personal data.

Art. 16. Other provisions

In case of violation of the principles of data protection or your rights according to this Privacy notice, the Terms of use or the applicable law, you could file a complaint before the competent national supervisory authority:

Information about the Supervisory authority

Legal name Commission for personal data protection

Seat and registered office: 2 Prof. “Tsvetan Lazarov” Blvd., Sofia 1592, Bulgaria

Address of correspondence: 2 Prof. “Tsvetan Lazarov” Blvd., Sofia 1592, Bulgaria

Telephone +3592/91-53-518

Website: www.cpdp.bg

Art. 17.

You could exercise all of your rights related to the processing of your personal data by using the exemplary forms of GPTboost™ or by using the functionalities in your profile. Of course, you can also exercise your rights by sending us an e-mail with a request. Please, have in mind that GPTboost™ as a data controller with respect to your personal data may require additional information and certification of your identity for safety and security purposes.

Art. 18.

GPTboost™ may at any time amend the Privacy notice for which it shall publish a notification on its website. Your continued use of the service after the publication of the amended Privacy notice means that you consent that your personal data shall be processed under the terms as set out therein.

Art. 19.

1 When assigning GPTboost™ to process personal data of a third party (the End users) for the purpose of using the service, GPTboost™ acts as a personal data processor.

2 In the cases under para. 1, GPTboost™ acts only on your instruction as a user of the service and only as long as it may have control over the personal data you are processing. GPTboost™ has no control over the content and data that you as a service user choose to upload to the service (including whether or not this data includes personal data). In this case, GPTboost™ has no role in the decision-making process whether the user uses the data processing service, for what purposes and whether they are protected. Accordingly, the responsibility of GPTboost™ in this case is limited to 1) complying with the user’s instructions under the contract and terms and conditions, and 2) providing the service and functionality information through its interface.

Exemplary form of withdrawal of consent for processing purposes: Preview

Exemplary form for request “to be forgotten” – for erasure of personal data related to me: Preview

Exemplary form for request for portability of personal data: Preview

GPTboost 

DATA PROCESSORS LIST

Data Processor Purpose of the processing of personal data: Braintree / PayPal, Inc.

Processing payments: Chargebee / ChargeBee Inc.

Managing subscriptions, invoicing and billing: Intercom / Intercom Inc.

Real-time communication with our customers via livechat and emails: Teamwork / Teamwork.com Ltd.

24/7 Technical support communication with our customers

Support Policy

GPTboost™ offers tools to help users running applications on the GPTboost™ Platform. These include Bug Reporting Tools, Billing Inquiries described below.

Official Channels

BUG REPORTS

GPTboost™ provides a Bug Reporting Tool inside the GPTboost™ Dashboard to assist with bug reports. GPTboost's bug support offering is available only for official Services and APIs provided by GPTboost™. GPTboost™ actively monitors and helps users resolve bugs and incidents.

GPTboost™ supports the following use cases for bug reports:

  • Identifying problems preventing an application from working on GPTboost™
  • Providing workarounds or resolutions for known problems

GPTboost™ does not offer support for the following through the bug report system:

  • General debugging of user applications
  • Rewriting application code for compatibility with GPTboost™
  • Modifying and/or patching third party or Open Source software packages for compatibility with GPTboost™
  • Installation and configuration of Parse SDKs
  • General questions about Parse SDKs and Parse Server APIs
  • Answering general how-to questions, and providing pointers to documentation
  • Incorrect documentation
  • Feature requests
  • Troubleshooting

Bug reports will only be processed if:

  • The report is made through the Bug Reporting Tool.
  • The report originates from a registered GPTboost™ account email address.
  • The reporter has collaborator access to any specific GPTboost™ applications pertaining to the request.
  • The reported issue can be reproduced by a GPTboost™ team member with the provided information.

BILLING INQUIRIES

GPTboost™ provides an email address (billing@GPTboost.io) to assist with the following use cases:

  • Questions regarding your account statements

GPTboost™ does not offer support for the following through the billing inquiry system:

  • Development questions
  • Bug reports
  • Sales questions

HOURS

GPTboost™ Bug Reporting offers 24×5 coverage, Monday through Friday, excluding Bulgarian Holidays.

Acceptable Use Policy

Your use of the Service is subject to this Acceptable Use Policy. GPTboost™ reserves the right to terminate your account and cease all service if you are found to be in violation of this policy. We may change these policies at any time. It is your responsibility to keep up-to-date with and adhere to them. All capitalized terms used herein have the meanings stated in the Terms, unless stated otherwise.

Prohibited Content

The Content displayed and/or processed through your Application or other web site utilizing the Service shall not contain any of the following types of content:

  • Content that infringes a third party's rights (e.g., copyright) according to applicable law;
  • Excessively profane content;
  • Hate-related or violent content;
  • Content advocating racial or ethnic intolerance;
  • Content intended to advocate or advance computer hacking or cracking;
  • Other illegal activity, including without limitation illegal export of controlled substances or illegal software;
  • Drug paraphernalia;
  • Phishing;
  • Malicious content;
  • Other material, products or services that violate or encourage conduct that would violate any criminal laws, any other applicable laws, or any third-party rights.

Prohibited Actions

Customer agrees not to, and not to allow third parties (including End Users) to use the Service:

  • to violate, or encourage the violation of, the legal rights of others (for example, this may include allowing End Users to infringe or misappropriate the intellectual property rights of others in violation of the Digital Millennium Copyright Act);
  • to engage in, promote or encourage illegal activity
  • for any unlawful, invasive, infringing, defamatory or fraudulent purpose (for example, this may include phishing, creating a pyramid scheme or mirroring a website);
  • to intentionally distribute viruses, worms, Trojan horses, corrupted files, hoaxes, or other items of a destructive or deceptive nature;
  • to interfere with the use of the Services, or the equipment used to provide the Service, by customers, authorized resellers, or other authorized users;
  • to disable, interfere with or circumvent any aspect of the Service;
  • to generate, distribute, publish or facilitate unsolicited mass email, promotions, advertisements or other solicitations ("spam")