Working draft, pending legal review. The final wording may change.
Netgen Client Hub Privacy Policy
Version 2026-09-07 · Working draft, pending legal review
1. Controller
Netgen d.o.o., Croatia ("Netgen"), contact: info@netgen.io. Registered address and company numbers are added before the final version is published. For processing that happens on client websites where the widget is embedded, Netgen normally acts as a processor on behalf of that client.
2. What data we process
Application user data
- name, e-mail address and any alias addresses, interface language, profile picture
- roles and project memberships
- sign-in records (time of code request, sign-in outcome) for security purposes
- terms acceptance record: time, version, IP address and browser details
Content submitted by users
- bug reports, ideas, comments, links and attached files
- absence periods entered by the user, or imported from Netgen's internal system for internal team members
Technical data attached to a bug report
- page address, browser details and window size
- console messages and a list of network requests, cleaned of e-mail addresses, long numbers and tokens; request addresses are stored without parameters
- an optional behaviour recording (see section 4)
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing access to and operating the application | performance of a contract / legitimate interest |
| Resolving reported bugs and running the project | legitimate interest of Netgen and the client |
| Notifications about changes to reports and ideas | legitimate interest, with an opt-out |
| Security, abuse prevention, terms acceptance records | legal obligation and legitimate interest |
4. Behaviour recording from the widget
A recording of the last two minutes on the page may be sent with a bug report. It is masked by default:
- all page text and everything typed into fields is replaced with asterisks; typed content never leaves the browser,
- images and fonts are not embedded in the recording,
- elements marked with the
nch-blockclass are omitted entirely, - what remains is the sequence of actions: clicks, scrolling, navigation and view changes.
Before sending, the user can switch the recording off. A project manager can disable recording completely or set the switch to be off by default. Recordings are deleted automatically after 30 days (configurable per project, up to 365 days).
5. Retention
- behaviour recordings: 30 days by default
- bug reports, ideas and comments: for the duration of the project and up to two years afterwards, unless agreed otherwise with the client
- sign-in records: 12 months
- terms acceptance record: for the life of the account and five years after closure
- user account: until participation in projects ends, after which it is archived
6. Recipients
Data is accessible to Netgen employees and associates who need it for the project, and to authorised members of the client team on that project. Processors used include hosting and database providers, an e-mail delivery provider, and an issue tracker (Jira) when a report is transferred to it. Data processing agreements are in place.
7. Transfers outside the EU
Data is primarily processed within the European Economic Area. Where a processor handles data outside the EEA, the transfer relies on the European Commission's standard contractual clauses.
8. Your rights
Users have the right to access their data, and to rectification, erasure, restriction of processing, portability, and objection to processing based on legitimate interest. Requests go to info@netgen.io and are answered within 30 days. Users may also lodge a complaint with the Croatian data protection authority (AZOP).
9. Cookies and local storage
The application uses no marketing or analytics cookies. Only strictly necessary data is stored: the signed-in session, chosen language, project ordering and board view choice. The widget remembers the button position and the content of an unsent report.
10. Security
Access to data is restricted by roles and database-level rules. Traffic is encrypted and internal content is not available to external users. Administrator actions are logged.
11. Changes
A new version of this Policy is published on this page and users accept it again at their next sign-in.