Privacy Policy

Last Updated: 12 June 2026

1. Who We Are (Data Controller)

This Privacy Policy explains how UAB Vertex, a private limited liability company incorporated in the Republic of Lithuania (company code 120320756, registered address Liepų 83, Klaipėda, Lithuania), operating the Hydron service ("Vertex", "we", "us"), collects and uses personal data for which it acts as data controller.

For privacy matters, contact us at support@hydron.app.

This Policy applies to personal data we control — for example, data about our account holders, prospective customers, and website visitors. It does not govern personal data that our clients place on the infrastructure we provide and that we process on their behalf; that processing is governed by our Data Processing Agreement (see Section 11).

2. Personal Data We Collect

Data you provide:

Account information (name, email, username, password, profile details)
Professional information (company name, job title, team)
Payment and billing information (billing address; card details are handled by our payment processors, not stored by us)
Communications you send us (support requests, correspondence)

Data generated through use of the Service:

Infrastructure configurations, deployment plans, project metadata, logs
Credentials and access tokens for services you connect (encrypted; used only to perform actions you initiate)
Prompts and queries you submit to our AI, and the resulting recommendations
Usage data (features used, actions taken, session activity)

Data collected automatically:

Device and browser information, unique identifiers
Log data (IP address, access times, pages viewed)
Data collected via cookies and similar technologies (see Section 8)

3. Why We Use Your Data and Our Legal Bases

Under the GDPR, we rely on the following legal bases:

Performance of a contract (Art. 6(1)(b)) — to create and manage your account, provide and operate the Service, provision and maintain infrastructure, process deployments you request, and handle billing.
Legitimate interests (Art. 6(1)(f)) — to secure and improve the Service, prevent fraud and abuse, analyse usage, develop new features, and communicate about service operation. Where we rely on legitimate interests, we balance them against your rights and you may object (see Section 6).
Consent (Art. 6(1)(a)) — for marketing communications and non-essential cookies. You may withdraw consent at any time.
Legal obligation (Art. 6(1)(c)) — to comply with accounting, tax, and other legal requirements.

We use anonymised or aggregated data — which can no longer identify you — to improve our AI models and the Service; such data is not subject to this Policy.

We do not sell your personal data. We share it only as follows:

Processors and service providers acting on our behalf under written contract — including infrastructure and cloud providers, payment processors, analytics providers, email providers, and support tools. These providers may only use the data for the purposes we authorise.
Connected services you initiate — when you connect a third-party service or a migration source, we use the access you provide to perform only the actions you request.
Legal and protective disclosures — where required by law, court order, or to protect our rights, users, or the public.
Business transfers — in connection with a merger, acquisition, financing, or sale of assets, with notice to you.
With your consent — for any other purpose you agree to.

5. International Transfers

We are established in the EU and aim to keep personal data within the European Economic Area (EEA). Where personal data is transferred to, or accessed from, a country outside the EEA that does not benefit from an adequacy decision, we put in place an appropriate safeguard under the GDPR — typically the European Commission's Standard Contractual Clauses (SCCs) — and apply supplementary measures where needed. You may request information about these safeguards via support@hydron.app.

6. Your Rights

Subject to applicable law, you have the right to: access your personal data; rectify inaccurate data; erase data; restrict or object to processing (including processing based on legitimate interests and direct marketing); data portability; and withdraw consent where processing is based on consent. To exercise these rights, contact support@hydron.app. We will respond within the period required by law (generally one month). We may need to verify your identity first.

You also have the right to lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija, VDAI — vdai.lrv.lt), or with the supervisory authority in your country of residence.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by law (for example, tax and accounting records). When you delete your account, we delete or anonymise your personal data within a reasonable period, except where retention is legally required or necessary for the establishment, exercise, or defence of legal claims.

8. Cookies and Tracking

We use essential cookies necessary to operate the Service, and — with your consent — analytics and preference cookies. You can manage non-essential cookies through our cookie banner or your browser settings.

9. Children

The Service is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from children below the applicable age of digital consent. If you believe a child has provided us with personal data, contact support@hydron.app and we will take steps to delete it.

10. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest for sensitive data, access controls, secure key management for credentials, monitoring, and staff training. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

11. Data You Place on Our Infrastructure (Processor Role)

When you use the Service to host applications, databases, or other workloads, you decide what personal data is placed on the infrastructure and why. For that data, you are the controller and Vertex is the processor. We do not access, read, or use that data except as strictly necessary to provide maintenance and security or as you instruct. That processing is governed by our Data Processing Agreement at https://hydron.app/dpa, not by this Policy.

12. Changes to This Policy

We may update this Policy from time to time. We will post the updated version here and update the "Last Updated" date, and will notify you of material changes where required.

13. Contact

UAB Vertex (operating Hydron) Company code: 120320756 Registered address: Liepų 83, Klaipėda, Lithuania Contact: support@hydron.app

By using the Service, you acknowledge that you have read and understood this Privacy Policy.