Privacy Policy

1. Definitions

For purposes of this Privacy Policy:

• Namirasoft, we, us, or our: refers to Namira Software Corporation and its related Services where applicable.
• Service: refers to Namirasoft Container Registry, including its functionality, features, technologies, websites, applications, APIs, software packages, integrations, documentation, and related services made available through Namirasoft Container Registry.
• Namirasoft Services: refers to products, services, applications, websites, platforms, technologies, features, integrations, and other offerings provided or operated by Namirasoft.
• Namirasoft Account: refers to the Namirasoft identity and authentication service that you must hold to access and use the Service.
• Workspace: refers to an organizational container, provided through Namirasoft Workspace, under which Registry Connections created in the Service are grouped.
• Credential: refers to a credential record maintained in Namirasoft Credential and referenced by the Service using an identifier. The Service does not store the underlying secret of a Credential.
• Registry Connection: refers to a record you create in the Service to connect an External Container Registry. A Registry Connection contains a name, a type, an optional description, optional metadata, Workspace and account identifiers, timestamps, and a reference to a Credential. A Registry Connection does not contain registry secrets or container images.
• External Container Registry: refers to a third party container registry that you connect through the Service, such as a registry operated by a cloud provider or a self managed registry platform.
• Personal Information: refers to information relating to an identified or identifiable individual and includes information that may be considered personal information, personal data, or similar information under applicable laws.
• Process or Processing: refers to activities involving the collection, use, recording, organization, storage, access, disclosure, transfer, analysis, modification, retention, deletion, or other handling of information.

2. About This Privacy Policy

This Privacy Policy describes the information practices of Namirasoft Container Registry. It is provided for transparency and is intended to help you understand what information is associated with the Service and how that information is handled. Your use of the Service is governed by the applicable Namirasoft terms, which are provided separately.

This Privacy Policy applies only to Namirasoft Container Registry. It does not apply to the External Container Registries that you connect through the Service, which are operated by third parties and governed by their own terms and privacy notices. It also does not replace the Privacy Policy of Namirasoft Account or the privacy notices of other Namirasoft Services, which govern the information those services process.

3. Namirasoft Account, Workspace, and Credential

Access to the Service requires a valid Namirasoft Account. Authentication is performed by Namirasoft Account, and the Service relies on Namirasoft Account for identity verification and session management. The Service does not create or manage authentication credentials of its own.

Registry Connections created in the Service are organized under a Workspace provided through Namirasoft Workspace. The Workspace determines the organizational context in which your Registry Connections are grouped.

Connecting an External Container Registry requires a Credential maintained in Namirasoft Credential. The Service stores only a reference to a Credential by its identifier. The secret of the Credential and the registry address associated with it are held in Namirasoft Credential and are not stored by the Service.

4. Information We Collect

Namirasoft collects information necessary to provide the Service. Information may be obtained directly from you, from Namirasoft Account, and from operational activities associated with use of the Service. The categories of information we collect are described below.

Account Information

Your Namirasoft Account identifier, email address, and first and last name are provided to the Service upon authentication. This information is obtained from Namirasoft Account and is used to identify you within the Service, associate the Registry Connections you create with your account, and operate the Service.

Registry Connection Records

When you create a Registry Connection, the Service stores the name, type, and optional description you provide, together with any optional metadata you add for organizational purposes. Each Registry Connection is stored with your account identifier, the applicable Workspace identifier, a reference to the Credential you select, and the creation and modification timestamps of the record. A Registry Connection is a connection record only. It does not contain the secret used to access the External Container Registry, and it does not contain container images or image data.

Usage and Operational Data

Namirasoft collects operational data generated automatically during use of the Service, including records of connection management activities and configuration changes. This data is used to maintain Service integrity, monitor for unauthorized activity, and support security and compliance obligations.

Information We Do Not Collect

Namirasoft Container Registry does not store or receive your container images, image data, manifests, layers, or blobs. Image content is exchanged directly between you and your External Container Registries and never passes through the Service. The Service does not store the secret of any Credential, and it does not store the registry address associated with a connection, because those are held in Namirasoft Credential. The Service does not independently collect device information, IP addresses, or authentication credentials. Authentication cookies and session management are handled by Namirasoft Account in accordance with its Privacy Policy.

5. How We Use Your Information

Namirasoft uses the information described in this Privacy Policy for the following purposes:

• Providing the Service: to create, store, organize, retrieve, and delete Registry Connections and their associated metadata on your instruction.
• Maintaining security and integrity: to protect the Service and its users, detect and prevent unauthorized activity, and preserve the reliability of the Service.
• Communicating with you: to send administrative and service related messages regarding your use of the Service.
• Complying with legal obligations: to meet applicable legal, regulatory, and compliance requirements and to respond to lawful requests.
• Operating and improving the Service: to understand how the Service is used and to maintain and enhance its functionality, including through aggregated and de identified information.
• Enforcing terms and preventing misuse: to enforce applicable terms and to investigate and prevent fraud, abuse, or violations of policy.

6. Legal Basis for Processing

Where applicable data protection laws require a legal basis for Processing, Namirasoft relies on the following bases.

Performance of a Contract

Namirasoft processes information as necessary to provide the Service you request, including creating and maintaining the Registry Connections associated with your account.

Legitimate Interests

Namirasoft processes information to operate, secure, and improve the Service, to prevent fraud and abuse, and to maintain the integrity of the Service, in a manner consistent with your rights and interests.

Legal Obligations

Namirasoft processes information as necessary to comply with applicable legal and regulatory obligations and to respond to lawful requests from competent authorities.

Consent

Where required by applicable law, Namirasoft processes information on the basis of your consent, which you may withdraw at any time without affecting Processing carried out before the withdrawal.

7. Automated Processing and Service Operations

The Service performs automated operations that are limited to storing, organizing, and retrieving Registry Connection records and to monitoring the health and performance of the Service. These operations are executed based on the connection records and instructions you provide.

Because container images and image data do not pass through the Service, the Service does not inspect, scan, or analyze image content. The Service does not carry out automated decision making that produces legal effects or similarly significant effects concerning individuals within the meaning of applicable data protection laws, and it does not perform profiling.

8. Information Sharing and Disclosure

Namirasoft does not sell Personal Information. Namirasoft may share information only in the circumstances described below.

Within Namirasoft Services

The Service shares information with Namirasoft Account, Namirasoft Workspace, and Namirasoft Credential as necessary to authenticate you, organize your Registry Connections, and reference the Credentials required to operate the Service.

Service Providers

Namirasoft may share information with service providers that perform functions on its behalf, such as infrastructure, hosting, and security providers, subject to obligations to protect the information and to use it only for the purposes for which it is provided.

Legal and Regulatory Requirements

Namirasoft may disclose information where necessary to comply with applicable law, regulation, legal process, or an enforceable governmental request.

Security and Fraud Prevention

Namirasoft may disclose information where necessary to protect the rights, property, or safety of Namirasoft, its users, or the public, and to detect, prevent, or address fraud, security, or technical issues.

Business Transfers

In connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of the transaction, subject to this Privacy Policy or a successor policy consistent with it.

With Your Direction

Namirasoft may share information at your direction or with your consent, including where you choose to connect the Service with other services.

9. International Transfers of Information

Namirasoft is headquartered in Canada and operates in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Information associated with the Service may be processed, stored, or accessed in jurisdictions outside the country where it was originally collected, including within Canada and in other countries where Namirasoft or its service providers operate. These jurisdictions may have privacy laws that differ from those applicable in your jurisdiction. By using the Service, you acknowledge that your information may be transferred to and processed in jurisdictions that may not provide the same level of data protection as your country of residence.

Where information is transferred internationally, Namirasoft implements contractual and technical safeguards consistent with applicable legal requirements. Namirasoft does not warrant that information processed in other jurisdictions will be subject to privacy protections equivalent to those in your country of residence.

10. Data Security

Namirasoft maintains technical and organizational measures designed to protect information associated with the Service against unauthorized access, disclosure, alteration, and destruction. These measures include access controls, encryption in transit, monitoring, and operational safeguards appropriate to the nature of the information.

The Service is designed to reduce risk by storing connection records that reference External Container Registries rather than the secrets used to access them. Credential secrets are maintained in Namirasoft Credential, and container images remain with your External Container Registries. No method of transmission or storage is completely secure, and Namirasoft cannot guarantee absolute security. You are responsible for maintaining the security of your Namirasoft Account and the Credentials you reference.

11. Information Retention

Namirasoft retains information associated with the Service for as long as necessary to provide the Service, fulfill the purposes described in this Privacy Policy, and comply with applicable legal obligations. Retention periods may vary depending on the nature of the information, applicable legal obligations, security requirements, dispute resolution needs, fraud prevention requirements, auditing obligations, and other legitimate operational or business purposes.

Registry Connection Records

Registry Connection records are retained for as long as the associated connection exists in the Service. When you delete a Registry Connection, it is removed from user facing interfaces and is no longer accessible through the Service. Namirasoft may retain records of prior connections for operational, security, and legal compliance purposes for such period as Namirasoft determines to be necessary.

Usage and Operational Data

Operational data generated by the Service, including connection management event records, is retained for security monitoring, incident response, and compliance purposes. Retention periods for this data are determined by operational and legal requirements.

Account Deletion

Following the deletion of a Namirasoft Account, information associated with that account in the Service may be retained for a period required to fulfill legal obligations, resolve disputes, or address security incidents, before being deleted or de identified. Registry Connections associated with a deleted account are removed in accordance with applicable account termination procedures.

12. Data Integrity and Responsibility

You are responsible for the accuracy and appropriateness of the Registry Connections you create and the metadata you associate with them, and for ensuring that you are authorized to connect the External Container Registries you reference. You are responsible for the Credentials you maintain in Namirasoft Credential and select for use with the Service.

Namirasoft does not control and is not responsible for the External Container Registries you connect, which are operated by third parties under their own terms. Namirasoft does not assess the appropriateness, accuracy, or security implications of the connection records or Credentials you configure.

13. Aggregated and De-Identified Information

Namirasoft may create aggregated or de identified information that does not identify you or any individual, and may use and retain such information for operational, analytical, and Service improvement purposes. Namirasoft maintains and uses this information in a manner that does not reasonably permit re identification of individuals.

14. Your Rights and Controls

Subject to applicable law, you may have rights regarding the Personal Information associated with the Service. The availability and scope of these rights depend on your jurisdiction.

Access and Portability

You may request access to the Personal Information associated with your use of the Service and, where applicable, request a copy of that information.

Correction and Deletion

You may update or delete the Registry Connections associated with your account through the Service, and you may request correction or deletion of Personal Information, subject to the retention practices described in Section 11 and applicable legal obligations. Account information is managed through Namirasoft Account.

Objection, Restriction, and How to Exercise Your Rights

Where applicable, you may object to or request restriction of certain Processing, and you may withdraw consent where Processing is based on consent. To exercise your rights, contact Namirasoft using the methods described in the Contact Us section. Namirasoft may take steps to verify your identity before responding to a request.

15. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy from time to time to reflect changes in the Service, legal requirements, or information practices. When changes are made, Namirasoft will revise the date at the top of this Privacy Policy. Where required by applicable law, Namirasoft will provide additional notice of material changes. Your continued use of the Service after an updated Privacy Policy takes effect is subject to the updated Privacy Policy.