Privacy Policy

1. Definitions

• Personal Information: information that identifies, relates to, or can reasonably be linked to an identified or identifiable individual.
• Service: Namirasoft Container Registry, the registry management service described in this Policy.
• Namirasoft Services (the ecosystem): the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you across Namirasoft Services.
• Registry connection: a record you create that links to one of your existing container registries so you can manage it in the Service.
• Registry type: the kind of registry a connection points to, such as Amazon ECR, Azure ACR, Google, GitHub, GitLab, Harbor, JFrog Artifactory, Sonatype Nexus, a private registry, or a public repository.
• Credential: the sign-in for a registry, which you create and store in Namirasoft Credential and reference from a connection.
• Workspace: the Namirasoft Workspace a connection belongs to, used to organize and separate your connections.

2. Namirasoft Account

Namirasoft Container Registry relies on Namirasoft Account for authentication. When you sign in, Namirasoft Account provides the Service with the identifiers it needs to associate your connections with you and show you your own records. The collection and handling of your registration details, sign-in credentials, and profile are governed by the Namirasoft Account Privacy Policy. This Service does not receive or store your Namirasoft Account password. Namirasoft Account also issues any Service User you use, a non-human identity such as an application or AI agent for automated access, which is created and handled under that same policy. Namirasoft Account establishes these identities, while the access that lets another user or a Service User act in Namirasoft Container Registry is granted and managed through Namirasoft Access and handled under the Namirasoft Access Privacy Policy.

3. Information We Collect

Namirasoft Container Registry is built to hold only what it needs to manage your registry connections. We collect:

• Account identifiers received from Namirasoft Account, used to associate your connections with you and show you your own records.
• Registry connections you create, including the name, the registry type, an optional description, the Workspace they belong to, and any categories, tags, or field values you add.
• A reference to the credential a connection uses, which you create and store in Namirasoft Credential, so the connection can identify which of your saved credentials it uses. A public repository connection uses no credential.

The Service keeps a record of your registry connections. It does not hold the images, image layers, manifests, or other contents of your registries, as described in the next section.

4. Information We Do Not Collect

Namirasoft Container Registry does not:

• collect your Namirasoft Account password or sign-in credentials, which are handled by Namirasoft Account;
• store the credential a connection references, or the address of your registry that the credential holds, both of which you keep in Namirasoft Credential and which are held and protected there;
• store, move, pull, push, scan, or hold the images, image layers, manifests, or other contents of your registries; image traffic flows directly between your own tools and your registries, and does not pass through Namirasoft;
• use your connections to build an advertising profile, and it does not sell your information.

5. Consent and Legal Grounds

Namirasoft generally collects, uses, and discloses your Personal Information with your knowledge and consent, which may be express or implied depending on the sensitivity of the information and the circumstances. When you first use Namirasoft Container Registry, you agree to this Privacy Policy and the Terms of Service, which is how you give your consent to the handling of your Personal Information described here, and you can withdraw it as described in section 6. In some cases, applicable law allows or requires us to handle Personal Information without consent, for example to provide a service you have requested, for security, fraud prevention, technical operation, or legal compliance, or where otherwise permitted or required by law. Where our activities are also subject to laws that use a legal basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above to: create and manage the registry connections you configure; organize them by Workspace, category, tag, and field; associate each connection with the credential you selected in Namirasoft Credential; maintain the security and integrity of the Service; and diagnose problems and improve its reliability. We do not use your connections for advertising.

8. Automated Decision-Making

Namirasoft Container Registry manages the connection records you create. It does not make decisions that produce legal or similarly significant effects about you through automated processing, and it does not profile you or take automated actions on your behalf beyond managing the connections you configure.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information. We share information only as follows:

• Within Namirasoft Services where needed to operate the Service, including referencing the credential you store in Namirasoft Credential and applying your Workspace and settings;
• Service providers that host or secure our infrastructure, bound by confidentiality and permitted to use the information only to provide their services to us;
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy;
• With your direction, where you choose to connect or share your connections with another product or person;
• Aggregated or de-identified information that cannot reasonably identify you.

10. International Transfers

Namirasoft operates from Canada and may process and store information in Canada and in other countries where we or our service providers operate. Where information is transferred across borders, we take steps to protect it with appropriate safeguards and in accordance with applicable law. By using the Service, you understand that your information may be processed in countries other than the one in which you reside, which may have different data protection rules, and we apply appropriate safeguards to protect your information where required.

11. Security Commitment

Namirasoft applies technical and organizational measures designed to protect the information handled by the Service. These may include access controls, authentication protections, encryption in transit, network protections, monitoring, and logging. We restrict access to information to those who need it to operate and support the Service. You also play a role in security by keeping your Namirasoft Account credentials and tokens confidential and by managing the registry credentials you store in Namirasoft Credential.

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law.

12. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements. Namirasoft Container Registry keeps your registry connections for as long as your Namirasoft Account exists, or as needed to provide the Service, so that you can continue to manage them. You can delete a connection at any time. The registry credentials themselves remain in Namirasoft Credential under its own policy, and the images in your registries remain in your registries under your control and your registry provider’s terms. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy. When you delete a connection, or when your connections are removed because your Namirasoft Account is deleted, the information is removed from active use and then permanently erased by our automated systems; because of system dependencies and backups, complete erasure can take from moments to several months, and copies may remain in secure backups until they are replaced in the ordinary course.

13. Data Integrity and Responsibility

You decide which registries to connect and how to organize them, and you are responsible for your connections, for the credentials you store in Namirasoft Credential, and for your registries and their contents. Namirasoft Container Registry manages the connection records as you direct. Your registries and the images in them are operated by you and your registry providers, which are separate companies, under their own terms and privacy policies.

14. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view and manage your registry connections in the Service at any time. For other requests, contact us and we will handle them in accordance with applicable law, which may include retaining a record where we have a legitimate or legal basis to do so. For identity and account rights, use Namirasoft Account.

To make a request, contact us using the options in the Contact Us section at the bottom of this page. To protect your information, we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

15. Children’s Privacy

Namirasoft Container Registry is not directed to children and is intended for use by individuals who are at least 18 years old. We do not knowingly collect Personal Information from children. Eligibility and age are managed by Namirasoft Account. If we learn that we have collected Personal Information from a child in a way that requires deletion, we will take appropriate steps to remove it.

16. Communications

We may send you messages that are necessary to operate the Service, such as security, technical, and account-related notices, which we send to the verified email address on your Namirasoft Account, the address you signed up with and verified there. These service messages are part of providing the Service.

17. Cookies and Tracking

The Service uses cookies that are strictly necessary to sign you in and operate it, such as the cookies used to maintain your authenticated session, together with Google Analytics cookies that help us understand how it is used. Google Analytics is operated by Google under its own privacy terms. You can manage cookies through your browser settings.

18. Accountability and Privacy Contact

Namirasoft is responsible for the Personal Information under its control and takes steps to ensure that such information is handled in accordance with this Privacy Policy and applicable privacy laws. Namirasoft has designated a person accountable for its compliance with this Privacy Policy, and their identity is available on request.

Questions, requests, or concerns regarding Namirasoft’s privacy practices or the handling of Personal Information may be submitted using the contact options in the Contact Us section at the bottom of this page.

19. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint using the contact options in the Contact Us section at the bottom of this page. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

20. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or legal requirements. When we make changes, we revise the effective date and post the updated Policy here. For minor or clarifying updates, your continued use of the Service after the updated Policy is posted indicates your acceptance of it. Where a change materially affects how we collect, use, or disclose your Personal Information, we will show you what has changed and ask you to review and agree to the updated Privacy Policy and Terms of Service before you continue using the Service. If you do not agree with an updated Policy, you may stop using the Service and request deletion of your Account.

Contact Us

For questions, comments, or concerns regarding this Privacy Policy or how the Service handles information, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.