Privacy Policy
Address: Republike Srpske 4A, 89000, TREBINJE, BiH
Contact: support@mvp-db.com
Last Updated: March 15, 2026
At MVP-DB, we respect your privacy and your ownership of your data. This policy explains how we handle information for our PostgreSQL hosting service.
The "No-Snoop" Commitment: We do not access, inspect, or analyze your database content for advertising, profiling, or data monetization purposes. We only access your data as strictly necessary to provide the service (e.g., automated backups) or where required by law.
1. Data Roles (Controller vs. Processor)
Under GDPR and similar frameworks:
- Controller: We are the Data Controller for your Account and Billing Data (email, name, subscription status).
- Processor: We act as the Data Processor for your Database Content. You remain the Data Controller for any data you store in your instances.
2. Data We Collect & Legal Basis
| Category | Data Examples | Legal Basis (GDPR) |
|---|---|---|
| Account Data | Email, Name, Login credentials | Contractual necessity |
| Billing Data | Billing transaction IDs, subscription/customer IDs, plan status, billing email, invoice status | Contractual necessity |
| Technical Data | IP Address, Usage logs, Query metrics | Legitimate Interest (Security) |
| DB Content | Data stored within your PostgreSQL tables | Contractual necessity |
3. How We Collect Data
We collect data directly from you when you create an account or interact with the Service, automatically through system logs and usage metrics, and from Lemon Squeezy for billing and subscription management.
4. How We Use Your Data
We use your data to provision your database, process payments, prevent platform abuse (e.g., crypto-mining), and send critical service updates. We do not sell your personal data to third parties.
We may disclose personal data if required to do so by law or in response to valid legal requests by public authorities.
5. Data Ownership & Portability
You retain 100% ownership of your database content. You may export your data at any time via standard PostgreSQL tools (pg_dump). It is your responsibility to export data prior to account cancellation.
6. Third-Party Subprocessors
To provide MVP-DB, we share data with the following categories of providers:
- Infrastructure: Amazon Web Services (AWS) for hosting and encrypted storage.
- Payments: Lemon Squeezy as Merchant of Record for payment processing, subscription management, tax calculation, invoices, refunds, and chargeback handling.
We do not store full payment card details. Payment information is handled by Lemon Squeezy and its payment infrastructure.
7. International Transfers
Your data is processed on servers located in the AWS region selected during provisioning. By using the service, you acknowledge that your data may be transferred to and processed in countries outside your own, including the United States, using appropriate safeguards (such as Standard Contractual Clauses).
8. Data Retention & Deletion
- Active Accounts: We retain data while your account is active.
- Termination: Upon account cancellation or 14 days of non-payment, database instances are deleted.
- Purge Window: Deleted data is removed from active systems within 48 hours and may remain in encrypted backups for up to 30 days before permanent deletion.
9. Your Rights
You have the right to access, correct, or request the deletion of your personal data. You may also object to processing or request data portability. To exercise these rights, contact us at support@mvp-db.com.
10. Security
We implement industry-standard security measures, including AES-256 encryption at rest, TLS 1.3 for data in transit, and strictly limited internal access to production infrastructure.
11. Cookies & Analytics
We may use cookies or similar technologies for authentication, security, analytics, and service improvement. Analytics data may include pages visited, device/browser information, referral sources, and usage events. You can control cookies through your browser settings.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify users via the Service or email. Continued use of the Service after such updates constitutes acceptance of the revised policy.