This addendum applies when Superstar Telecom LLC ("Processor"), operating PHP Patch Service, processes data on behalf of a customer ("Controller") during a scan, deep check or patch engagement.
Processing is limited to the software inventory, runtime snapshots and verification data described in the Privacy Policy and the engagement plan the Controller approves. The Processor never accesses application databases or end-user content for runtime patching.
The Processor acts only on the Controller's documented instructions (the approved plan). If an instruction appears to violate applicable law, the Processor will say so before acting.
Access is over SSH with key authentication. Deep checks are read-only. Snapshots are restore-tested before use and access is limited to the engagement.
Hetzner Online GmbH (hosting, United States data center for this service) and the payment processor named at checkout. The list is kept current on request.
Snapshots are deleted at the end of the plan's retention window (72 hours on Patch, extended on Patch + Rollback) or earlier on the Controller's request. Engagement records are deleted on request subject to legal retention duties.
The Processor will notify the Controller without undue delay after becoming aware of a personal-data breach affecting engagement data.
Not affiliated with the PHP Group. PHP is a trademark of the PHP Group.
This document is published in English, which is the controlling text.