Data Security and Retention

How secure is spareparts.live

Our products and services are designed with high security in mind. With our products and services, you can always be assured that any data stored by us remains safe, confidential, and accessible. By ‘safe,’ we mean the data will be protected against loss or corruption. ‘Confidential’ means access to the data is granted only to authorized personnel. ‘Accessible’ means the data is available to authorized users whenever required.

How do we handle data

Our products and services enable the creation and delivery of visual navigation, using images and drawings, for websites. Our solution helps you provide better service to your customers or service organization by improving selection and ordering processes.

To provide the highest level of security for our Users and meet the requirements of the GDPR and other privacy regulations, we do not save any personal data of our Users’ Visitors by default. Our architecture was designed to offer aggregative and meaningful data without risking the private data of our Users and our Users’ Visitors.

The service only works when the user adds their personalized script with a domain access token in the heading area of their web pages. When a Visitor accesses the web page, the script fetches the appropriate configuration. It applies the functionality with the content browser-side by adding the content into the DOM as it loads.
The spareparts.live service only interfaces with the front end of the User’s website and does not require any access to their backend system or database. All data is sent via secure https.

What data do we capture

User data

When a user signs up to our services, we store the data provided through the signup form, such as their email address and website. For paying users, we store data that is legally required to send a correct invoice. It is each User’s voluntary decision whether to provide us with any such personal data. Still, refusal to provide any required data may result in us being unable to register the User and not being able to receive our Services.

Users’ Visitors data

By default, spareparts.live only collects non-identifiable information about our Users’ Visitors. The service stores the following information for the Visitors who visit the User’s website:

• Events were performed during the visitor sessions on the website
• Platform and browser used
• The country browsed from 

Where do we store data

Our services are hosted on leading, high-security servers of Amazon and TransIP in the EU and other jurisdictions as needed for the proper delivery of our Services and/or as required by law. For more information, please visit http://amazon.com and https://www.transip.nl.

Service providers that store or process your Personal Information on our behalf are each contractually committed to keeping it protected and secured, in accordance with industry standards and regardless of any lesser legal requirements that may apply in their jurisdiction.

How do we protect data

Code security

Our code is stored in a GitHub system. We employ strict role-based security/passwords for access to the code. Commits to production code are strictly reviewed, and approval is restricted after passing Unit Testing and QA in Test and Staging. There is a daily backup of the database data in Amazon Web Service’s (AWS’s) S3 storage service. For further information, please visit https://aws.amazon.com.

Application access

Users are always connected to the spareparts.live web application via HTTPS using Secure Sockets Layer (SSL), a cryptographic protocol designed to protect against eavesdropping, tampering, and message forgery. Users can assign roles and permissions to team members given access to the account or selected domains added to the account to ensure the appropriate level of access to their account.

Data Retention Policy

Upon termination of a subscription, customer data within our online service will be retained for up to 90 days. During this period, customers will have the opportunity to retrieve their data. After the 90-day retention period, all associated customer data will be permanently deleted from our systems unless otherwise required by law or specific contractual agreements. This retention policy ensures a secure and efficient transition for customers following the end of their subscription.