Built under EU law
GDPR and data protection
Where your data sits, what we do with it, and what you can do about it.
Provibr is built and run in the Netherlands, so the GDPR is the law it was designed under rather than something bolted on afterwards. This page is the short version; the documents it points to are the ones that bind.
- Servers in the Netherlands
- Credentials stay on your own host
- Buttons for export and closure
The three documents
- Privacy policyWhat we collect, why, who receives it and how long we keep it, including the full table of processors and every retention period.
- Terms of serviceThe agreement for using the platform: what we owe you, what you owe us, and which law and court apply.
- Data processing agreementApplies automatically to every account, with no signature round. This is the one that matters when your own customers' data passes through Provibr.
Everything binding is written down and published. They apply as written, and we announce changes before they take effect.
Where your data is
Platform data does not leave our own machines. Provibr runs on FullStack Studio's own servers in the Netherlands, with no third-party hosting provider in between.
- Servers in the Netherlands, owned and operated by us
- Your infrastructure credentials never reach them at all: they stay encrypted on your own agent host, with a key bound to that machine
- Where a processor sits outside the EEA, the transfer runs on an adequacy decision or standard contractual clauses
Your rights
The GDPR gives you a set of rights over your personal data. All of them apply here, and none of them cost anything.
- See the personal data we hold about you
- Correct it if it is wrong
- Delete it, except where the law makes us keep it: invoices have to stay for seven years
- Restrict or object to processing we base on a legitimate interest
- Receive your data in a portable, machine-readable format
Two of them are a button
Export and closure sit in the panel, under your own settings. The export is a machine-readable file of your account's data; closing an account starts a deletion that runs after a grace period, and removes everything the law does not require us to keep.
For anything else, email info@provibr.com and we will answer within a month. You can also lodge a complaint with the Dutch Data Protection Authority.
What we deliberately do not hold
The cheapest way to protect data is not to have it. These four are structural: the platform could not read them if it wanted to.
Your infrastructure credentials
The token for your hypervisor or control panel is sealed in a vault on your own agent host, encrypted with a key mixed with that machine's identity. It reaches the platform once, in transit, and is never written to our database.
Your card and bank details
Payments run through Stripe's own checkout. We receive the status, the amount, the method and a reference, never the number you typed.
API keys in readable form
Only a SHA-256 hash of a key is stored. A key you lose cannot be read back out of our database, by us or by anyone who took a copy of it.
The output of your scripts
A run records the template, the versions it used and the names of the secrets it read. The rendered text is never stored, so a password does not end up sitting in a table waiting to be found.
Who else touches it
A short list, and every one of them has a role we can name: Stripe for payments, Moneybird for invoicing, Cloudflare in front of the websites, and (only if you accept them) Google Analytics and YouTube. Hosting is ours.
Independent checks
We publish what we have. CSA STAR Level 1 is a self-assessment against the Cloud Security Alliance's questionnaire, filed in their public registry: our own answers, in the open, checkable by anyone.
What we do not claim
We hold no ISO 27001 certificate. The platform is built along those lines (least privilege, strict isolation per organisation, encryption in transit and at rest, daily backups), but no audit has taken place, and until one has we will not suggest otherwise.
This page explains; it does not govern. Where this summary and one of the three documents differ, the document is what counts.
Start with one host and one agent
Create an account, install the agent with a single command and connect your first Proxmox host. The trial runs for 14 days and asks for no payment details.