Privacy Policy
Draft for review — not legal advice. This is a working draft tailored to PeerAegis MFT’s data practices. Before publishing on p2pmft.com, have it reviewed by a qualified solicitor or data protection lawyer. Placeholders in orange must be filled in before going live.
Data Controller
The data controller responsible for personal data collected through p2pmft.com is:
[YOUR LEGAL BUSINESS NAME]
[Registered address]
Email: legal@p2pmft.com
Personal Data We Collect
| Category | Data collected | Source |
|---|---|---|
| Trial request | Full name, work email, company name, company size, intended use case, station count | Trial request form on /trial |
| Contact inquiry | Name, email, company name, free-text message | Contact form on /contact |
| Email communication | Email address, message content, timestamps | Email correspondence you initiate |
| Website analytics | [Describe your actual analytics tool] | Automatic — analytics tool |
| Server logs | IP address, browser user-agent, pages requested, HTTP status codes, timestamps | Automatic — web server |
We do not collect sensitive personal data.
How We Use Your Data
| Purpose | Data used |
|---|---|
| Provision and manage your trial environment | Name, work email, company name, station count |
| Send onboarding emails | Work email, name |
| Follow up on trial progress | Work email, company name, use case |
| Respond to contact and sales inquiries | Name, email, message content |
| Send purchase-related communications | Work email, company name |
| Improve the website | Aggregated analytics data |
| Security monitoring | Server logs |
We do not use your data for automated decision-making or profiling. We do not sell your data.
Legal Basis for Processing (GDPR / UK GDPR)
| Processing activity | Legal basis |
|---|---|
| Provisioning your trial | Performance of a contract — Art. 6(1)(b) GDPR |
| Responding to inquiries | Legitimate interests — Art. 6(1)(f) GDPR |
| Follow-up sales communication | Legitimate interests — Art. 6(1)(f) GDPR. Opt out anytime by replying “unsubscribe”. |
| Website analytics | [Describe basis for your analytics tool] |
| Server logs and security | Legitimate interests — Art. 6(1)(f) GDPR |
Who We Share Data With
We do not sell, rent, or trade your personal data. We share data only with:
- Email delivery provider ([e.g. Resend, Postmark]) — email address, name, message content.
- Website hosting ([your hosting provider]) — standard server logs.
- Analytics ([your analytics provider]) — aggregated usage data.
- Payment processor ([e.g. Stripe, Paddle]) — processes payment data directly; we do not handle card numbers.
How Long We Keep Your Data
| Data category | Retention period | Reason |
|---|---|---|
| Trial request data | 2 years from trial expiry | Follow-up sales opportunity |
| Active customer data | License duration + 7 years | Legal and accounting obligations |
| Contact form submissions | 3 years from last contact | Ongoing correspondence |
| Server logs | 90 days | Security monitoring |
| Email correspondence | 7 years | Standard business record retention |
The PeerAegis MFT Product and Your Files
When you run the infra-server on your own infrastructure, we have no access to any data in your installation — including transfer logs, station identities, file metadata, or file contents.
During your trial, the infra-server acts as a signaling and session coordination broker only. File bytes travel directly between your endpoint machines over DTLS-encrypted WebRTC DataChannels — we never receive or store the files you transfer.
- The contents of files transferred between your stations
- Decrypted file data (files are encrypted between endpoints; we hold no decryption keys)
- Private keys generated on your station machines
Cookies and Analytics
[Describe your analytics tool and cookie policy here. If using Plausible: no cookies, no consent banner required. If using GA4: cookies used, consent banner required.]
Your Rights
To exercise any right, email legal@p2pmft.com with “Privacy Request” in the subject. We respond within 30 days.
California residents (CCPA): You have the right to know what personal information we collect, to delete it, and to opt out of its sale (we do not sell personal information). Contact legal@p2pmft.com.
International Data Transfers
[Describe where your servers and processors are located and what safeguards apply for international transfers.]
Children’s Privacy
PeerAegis MFT is a B2B product for adult professionals. We do not knowingly collect data from individuals under 16. Contact legal@p2pmft.com if you believe we have done so inadvertently.
Changes to This Policy
We may update this policy. For material changes we will update the “Last updated” date and notify active trial users and customers by email at least 14 days before the change takes effect.
Contact Us
Email: legal@p2pmft.com
Post: [Your business name and registered address]