Privacy Policy

1. Definitions

• Personal Information: information that identifies, relates to, or can reasonably be linked to an identified or identifiable individual.
• Service: Namirasoft Container Registry, the registry management service described in this Policy.
• Namirasoft Services (the ecosystem): the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you across Namirasoft Services.
• Registry connection: a record you create that links to one of your existing container registries so you can manage it in the Service.
• Registry type: the kind of registry a connection points to, such as Amazon ECR, Azure ACR, Google, GitHub, GitLab, Harbor, JFrog Artifactory, Sonatype Nexus, a private registry, or a public repository.
• Credential: the sign-in for a registry, which you create and store in Namirasoft Credential and reference from a connection.
• Workspace: the Namirasoft Workspace a connection belongs to, used to organize and separate your connections.

2. Namirasoft Account

Namirasoft Container Registry relies on Namirasoft Account for authentication. When you sign in, Namirasoft Account provides the Service with the identifiers it needs to associate your connections with you and show you your own records. The collection and handling of your registration details, sign-in credentials, and profile are governed by the Namirasoft Account Privacy Policy. This Service does not receive or store your Namirasoft Account password.

3. Information We Collect

Namirasoft Container Registry is built to hold only what it needs to manage your registry connections. We collect:

• Account identifiers received from Namirasoft Account, used to associate your connections with you and show you your own records.
• Registry connections you create, including the name, the registry type, an optional description, the Workspace they belong to, and any categories, tags, or field values you add.
• A reference to the credential a connection uses, which you create and store in Namirasoft Credential, so the connection can identify which of your saved credentials it uses. A public repository connection uses no credential.

The Service keeps a record of your registry connections. It does not hold the images, image layers, manifests, or other contents of your registries, as described in the next section.

4. Information We Do Not Collect

Because of how the Service is built, Namirasoft Container Registry does not:

• collect your Namirasoft Account password or sign-in credentials, which are handled by Namirasoft Account;
• store the credential a connection references, or the address of your registry that the credential holds, both of which you keep in Namirasoft Credential and which are held and protected there;
• store, move, pull, push, scan, or hold the images, image layers, manifests, or other contents of your registries; image traffic flows directly between your own tools and your registries, and does not pass through Namirasoft;
• use your connections to build an advertising profile, and it does not sell your information.

5. Consent and Legal Grounds

Namirasoft generally collects, uses, and discloses your Personal Information with your knowledge and consent, which may be express or implied depending on the sensitivity of the information and the circumstances. In some cases, applicable law allows or requires us to handle Personal Information without consent, for example to provide a service you have requested, for certain security, fraud-prevention, legal, or business purposes, or where otherwise permitted or required by law. Where our activities are also subject to laws that use a legal-basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above solely to: create and manage the registry connections you configure; organize them by Workspace, category, tag, and field; associate each connection with the credential you selected in Namirasoft Credential; maintain the security and integrity of the Service; and diagnose problems and improve its reliability. We do not use your connections for advertising.

8. Automated Decision-Making

Namirasoft Container Registry manages the connection records you create. It does not make decisions that produce legal or similarly significant effects about you through automated processing, and it does not profile you or take automated actions on your behalf beyond managing the connections you configure.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information. We share information only as follows:

• Within Namirasoft Services where needed to operate the Service, including referencing the credential you store in Namirasoft Credential and applying your Workspace and settings;
• Service providers that host or secure our infrastructure, bound by confidentiality and permitted to use the information only to provide their services to us;
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy;
• With your direction, where you choose to connect or share your connections with another product or person.

10. International Transfers

Namirasoft operates from Canada and may process and store information in Canada and in other countries where we or our service providers operate. Where information is transferred across borders, we take steps to protect it with appropriate safeguards and in accordance with applicable law. By using the Service, you understand that your information may be processed in countries other than the one in which you reside, which may have different data protection rules, and we apply appropriate safeguards to protect your information where required.

11. Data Security

Namirasoft applies technical and organizational measures designed to protect the information handled by the Service. These may include access controls, authentication protections, encryption in transit, network protections, monitoring, and logging. We restrict access to information to those who need it to operate and support the Service. You also play a role in security by keeping your Namirasoft Account credentials and tokens confidential and by managing the registry credentials you store in Namirasoft Credential.

12. Data Security Incidents and Breach Notification

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law.

13. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements. Namirasoft Container Registry keeps your registry connections for as long as your Namirasoft Account exists, or as needed to provide the Service, so that you can continue to manage them. You can delete a connection at any time. The registry credentials themselves remain in Namirasoft Credential under its own policy, and the images in your registries remain in your registries under your control and your registry provider’s terms. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy. When you delete a connection, or when your connections are removed because your Namirasoft Account is deleted, the information is removed from active use and then permanently erased by our automated systems; because of system dependencies and backups, complete erasure can take from moments to several months, and copies may remain in secure backups until they are replaced in the ordinary course.

14. Data Integrity and Responsibility

You decide which registries to connect and how to organize them, and you are responsible for your connections, for the credentials you store in Namirasoft Credential, and for your registries and their contents. Namirasoft Container Registry manages the connection records as you direct. Your registries and the images in them are operated by you and your registry providers under their own terms.

15. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view and manage your registry connections in the Service at any time. For other requests, contact us and we will handle them in accordance with applicable law, which may include retaining a record where we have a legitimate or legal basis to do so. For identity and account rights, use Namirasoft Account.

To make a request, you can contact us through support.namirasoft.com or by email at accounts@namirasoft.com, and to protect your information we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

16. Children’s Privacy

Namirasoft Container Registry is not directed to children and is intended for use by individuals who are at least 18 years old. We do not knowingly collect Personal Information from children. Eligibility and age are managed by Namirasoft Account. If we learn that we have collected Personal Information from a child in a way that requires deletion, we will take appropriate steps to remove it.

17. Communications

We may send you messages that are necessary to operate the Service, such as security, technical, and account-related notices. These service messages are part of providing the Service. Any marketing communications are managed separately and subject to your choices, which you can control through Namirasoft Account.

18. Cookies and Tracking

Within the Service, Namirasoft uses cookies and similar technologies that are necessary to sign you in, keep your session secure, and remember your preferences; authentication is handled through Namirasoft Account. On our public websites, we may also use analytics cookies, such as Google Analytics, to understand how visitors use the site, and advertising cookies from providers such as Google. Google Analytics, provided through Google Tag Manager, is used on both our public websites and within the Service, and advertising cookies are used on our public websites. You can manage cookies through your browser settings and any cookie controls we make available, and disabling non-essential cookies will not prevent you from using the core Service.

19. Accountability and Privacy Contact

Namirasoft is accountable for the Personal Information under its control, including information transferred to service providers for processing on our behalf. We have designated a Privacy Officer who is responsible for our compliance with this Policy and applicable privacy law and who oversees our handling of Personal Information.

Privacy Officer, Namira Software Corporation, British Columbia, Canada. You can reach our Privacy Officer by email at accounts@namirasoft.com or through the Contact Us section.

20. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint to our Privacy Officer using the contact details above. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

21. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy from time to time to reflect changes in the Service, technology, or legal requirements. When material changes occur, we may notify users through email and/or announcements through the Service or its website, where appropriate or as required by applicable law. Your continued use of Namirasoft Container Registry after updates are posted constitutes acceptance of the revised Policy. If you do not agree with the updated Policy, you must stop using the Service.

Contact Us

For questions, comments, or concerns regarding this Privacy Policy or how the Service handles information, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.