Privacy Policy

Last updated: May 20, 2025

This Privacy Policy explains how Visudo LLC ("Visudo", "we", "our") collects, uses, shares, and protects your personal data when you visit www.daveops.sh (the "Website") or use our 1-on-1 mentoring service.

1. Who is responsible for your data?

• Data Controller: Visudo LLC, 30 N Gould St #7155, Sheridan, WY 82801, United States
• Contact: privacy@daveops.sh
• We currently do not have an EU representative as we process EU residents' data only occasionally and on a small scale (Art. 27.2.a GDPR). If this changes, we will update this Policy.

2. Scope of this Policy

This Policy applies to data collected through www.daveops.sh and any direct email contact. It does not cover external sites we link to (Calendly, YouTube, Stripe), or any future subdomains or newsletters, unless explicitly stated.

3. What personal data do we collect?

• Identification: Name, email address (via contact forms and Calendly bookings)
• Technical Data: IP address, browser agent, CloudFront logs (collected automatically by AWS/CDN)
• Payment Data: Last 4 digits of card, transaction ID, charge status (processed by Stripe, we never see your full card number)
• Cookies & Similar: Functional cookies from Calendly, Stripe, and YouTube (set by those third parties)
• Marketing (future): Email address (if you subscribe to the newsletter)
• We do not knowingly collect any special categories of personal data.

4. Why do we use your data? (Purposes and legal basis)

• To manage and deliver requested 1-on-1 mentoring sessions (Performance of a contract)
• To communicate with you regarding bookings or inquiries (Legitimate interest)
• To process payments via Stripe (Contract and legal obligation)
• To maintain security, detect errors, and create server statistics (Legitimate interest)
• To send marketing emails/newsletters (future) (Consent – you can withdraw anytime)

5. Who do we share your data with?

• We only share data with service providers who help us operate the Website and provide services. They act as "processors" under data processing agreements as required.
• Stripe, Inc.: Secure payment processing (USA)
• Calendly, LLC: Appointment scheduling (USA)
• Amazon Web Services: Hosting & CDN (USA/Global)
• Google Workspace: Corporate email (USA)
• YouTube (Google LLC): Video embedding (USA)
• We do not sell or rent your personal data.

6. International data transfers

All our hosting and main providers are in the United States, so your data is transferred and stored there. For visitors from the EU/EEA, transfers rely on Standard Contractual Clauses (SCC) or other lawful mechanisms by our vendors (Stripe, AWS, Google, Calendly).

7. Data retention periods

• Booking info and transactional emails: 3 years after your last session (legal defense/tax compliance)
• Server logs: 90 days (unless needed for abuse investigations)
• Newsletter: until you unsubscribe
• Emails: until your inquiry is fully resolved + 12 months
• We delete or anonymize data after these periods unless the law requires longer retention.

8. How do we protect your data?

• HTTPS/TLS encryption for all web traffic
• Stripe handles card data in PCI-DSS Level 1 environments
• Admin access secured by strong passwords and 2FA
• Software kept updated, least-privilege controls on AWS

9. Your rights

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”)
• Object to or restrict certain processing
• Receive your data in portable format
• Withdraw consent at any time (for marketing emails)
• To exercise any right, email privacy@daveops.sh. We reply within 30 days.

10. Children

Our mentoring service and Website are not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a child has provided us personal information, contact us so we can delete it.

11. Cookies and similar technologies

We do not set our own analytics or advertising cookies. However, Calendly, Stripe, and YouTube may set strictly necessary cookies for their widgets to work. You can block third-party cookies in your browser, but some features (booking, embedded videos) may not work.

12. Marketing communications

If you subscribe to our future newsletter, we'll send DevOps content and occasional promotions. You can unsubscribe any time using the link in every email or by contacting us.

13. Complaints

• For any questions or concerns about our data practices, contact privacy@daveops.sh first.
• EU/EEA residents: you may also complain to your local data protection authority. See this list.
• In the USA, you may contact the Federal Trade Commission (FTC).

14. Changes to this Policy

We may update this Policy at any time. Any material changes will be posted on this page and, where relevant, by email.

Effective date: May 20, 2025