GDPR & European Compliance Statement

FederationPulse · Published by Monryte SRL · Effective Date: 29 October 2026

Data Protection by Design and by Default (Art. 25 GDPR)

Monryte SRL is founded and headquartered in the European Union. We engineered FederationPulse under strict adherence to European data privacy jurisprudence. FederationPulse operates entirely on-device and local-first: no customer source code, DOM trees, cookies, or user identifiers leave your local machine or CI runner during diagnostic scans.

1. The Data Controller

The Data Controller for FederationPulse is:
Monryte SRL
Incorporated in Romania (European Union)
EU VAT Registration & Company Registry compliant.
Contact: dev@monryte.com

2. Adherence to GDPR Core Principles (Article 5)

Lawfulness, Fairness & Transparency (Art. 5(1)(a)): We process minimal transactional data strictly necessary to fulfill licensing contracts, maintaining absolute transparency.
Purpose Limitation (Art. 5(1)(b)): Customer contact and licensing data is collected solely for software license delivery, activation, and support. We never sell, monetize, or repurpose your data.
Data Minimisation (Art. 5(1)(c)): The diagnostic engine processes runtime objects exclusively in local RAM. Once your browser tab or CI pipeline terminates, in-memory telemetry is permanently wiped.
Accuracy (Art. 5(1)(d)): License holders may update and rectify their email and billing preferences at any time.
Storage Limitation (Art. 5(1)(e)): Telemetry is retained for 0 seconds on our servers. Financial records are stored only for statutory tax retention periods.
Integrity and Confidentiality (Art. 5(1)(f)): All communication channels, license verifications, and website interactions enforce TLS 1.3 encryption.
Accountability (Art. 5(2)): We maintain full audit records of sub-processor agreements, security assessments, and compliance procedures.

3. Exercise of Data Subject Rights (Articles 15–22)

European citizens and UK residents enjoy comprehensive data subject rights:

How to Exercise Your Rights

Send an email to dev@monryte.com with the subject GDPR Data Subject Request. We respond within 30 calendar days at no charge.

Right to Access (Art. 15): Obtain confirmation of whether your personal data is processed, alongside a copy of your license records.
Right to Rectification (Art. 16): Immediately rectify inaccurate billing email addresses or enterprise organization metadata.
Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your customer profile. Note that anonymized financial tax receipts must be retained where mandated by EU fiscal law.
Right to Restrict Processing (Art. 18): Restrict processing under contested circumstances.
Right to Data Portability (Art. 20): Receive your license details and transaction metadata in structured JSON format.
Right to Object (Art. 21): Object to any processing based on legitimate interests.
Automated Decision-Making (Art. 22): FederationPulse does not perform any automated profiling or scoring that produces legal effects concerning you.

4. Data Processing Addendum (DPA) for Enterprise

For Enterprise customers subject to EU GDPR or UK GDPR who deploy the Headless CI SDK (@federationpulse/playwright) across corporate infrastructure, Monryte SRL offers a standardized Data Processing Addendum (DPA) incorporating the European Commission’s Standard Contractual Clauses (SCCs).

To request a countersigned DPA, please email dev@monryte.com.

5. International Transfers & Sub-processors

Our payment Merchant of Record, Lemon Squeezy, Inc., operates in the United States under standard contractual clauses (SCCs) to ensure equivalent levels of protection as mandated under Chapter V of the GDPR and the Schrems II ruling.

6. Supervisory Authority Complaints

If you believe our processing of your personal data infringes the GDPR, you have the statutory right to lodge a complaint with an EU supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement.

In Romania, the supervisory authority is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP): www.dataprotection.ro.