What Permistry does with personal data.

The short version

Permistry is a tool for working on SAP SuccessFactors Recruiting configuration files. It never sends those files anywhere. The application at app.permistry.com is served with a connect-src 'none' Content-Security-Policy, which means the browser itself refuses to let it make network requests. Your templates, field ids, role labels and status names are not processed by us, because they never reach us.

The only personal data Permistry holds is what you type into the design-partner form, plus the ordinary technical records any website produces. That is what the rest of this page is about.

1. Who is responsible

The controller for the processing described here is Joseph Hudson, trading as Permistry, in the State of Michigan, United States.

For anything in this notice, including a request to see, correct or delete your data, write to privacy@permistry.com. A person reads that address; there is no ticket system, and you will not be asked to create an account to make a request.

2. What is collected, why, and on what basis

The design-partner form

If you submit the form on the home page, we collect your name and email address, and, only if you choose to type them, your firm, role and a short note about your work. We also record that you ticked the consent box, and when.

• Purpose: to contact you about the design-partner programme and to run it: arranging a conversation, sending early access, and asking what you think of it.
• Lawful basis: your consent, Article 6(1)(a). You can withdraw it at any time (see section 6). Withdrawing is as easy as giving it, and takes one email.
• Is it required? No. Submitting the form is entirely voluntary and nothing about Permistry depends on it. The workbench is free and needs no account. If you do not provide a name and email we simply cannot contact you, which is the only consequence.
• Please do not paste configuration into the note field. It is capped at 600 characters specifically so that it cannot hold a template excerpt, and it is not built to receive client data. If you send configuration anyway, we will delete it.

Abuse prevention on that form

To stop the form being used by scripts, the service counts recent submissions per visitor. It does this without storing your IP address: the address is combined with the current hour, hashed with SHA-256, and only the hash is kept, for two hours. Because the hour is part of what is hashed, the value changes every hour and cannot be used to recognise you later.

• Purpose: keeping the form usable.
• Lawful basis: legitimate interests, Article 6(1)(f). Our interest in a working contact form is weighed against an impact on you that is close to nil, since nothing durable or identifying is retained.

Website analytics

This marketing site uses Cloudflare Web Analytics to count page views and referrers. It sets no cookies, builds no profile, and does not track you across other websites. We see aggregate numbers, not individuals.

• Purpose: knowing whether anyone reads the page.
• Lawful basis: legitimate interests, Article 6(1)(f).
• The application has no analytics at all. Not a reduced amount, none at all. Its Content-Security-Policy forbids the network requests analytics would require.

Technical logs

Our hosting provider produces the usual short-lived edge records for requests to our domains, under its own security and anti-abuse practices. We do not build reports from them.

3. What is never collected

• Template content, in any form. That includes the XML itself and also filenames, tenant names, custom field ids, labels, role mappings and permission matrices. There is no Permistry endpoint that receives any of it.
• SuccessFactors credentials. The tool never asks for any.
• Special category data as defined in Article 9, and no data about children.
• Tracking cookies. The workbench stores some of your own preferences in your browser's local storage; that stays on your device and is never transmitted.

4. Who else processes it

Cloudflare, Inc. is our processor for most of it: it hosts this site, runs the service behind the form, stores the design-partner list, sends us a notification containing the submitted form details, and provides the analytics described above.

Porkbun LLC forwards mail sent to our published addresses, including the one in section 1, to the mailbox we actually read. The provider hosting that mailbox also processes its contents. If you email us, or submit the design-partner form, those details pass through this mail chain.

We do not sell personal data, we do not share it for anyone else's marketing, and we do not disclose it to third parties beyond the processors described here, except where we are legally required to.

5. Where it goes, and for how long

Transfers. Permistry is based in the United States, and the design-partner list is stored in Cloudflare's Eastern North America region, also in the United States. So if you are in the UK or the EU, contacting us transfers your details to the US. There is no way to use the form without that being true, which is why it is stated here rather than buried.

Our processors offer the European Commission's Standard Contractual Clauses and the UK Addendum in their data processing terms, and those cover the onward handling. Cloudflare also operates a global network, so a request may be served from outside the US even though the stored data sits in it.

Retention.

• Design-partner details: kept until the programme ends or you ask us to delete them, whichever comes first, and reviewed at least every 24 months so that stale entries are removed rather than accumulating. This applies to the stored row and its notification email.
• Abuse-prevention hashes: two hours, then automatically discarded.
• Analytics: aggregate only, retained by Cloudflare under its own published policy.

6. Your rights

You have the right to:

• Access the personal data we hold about you, and get a copy.
• Correct anything inaccurate or incomplete.
• Erase it; for the design-partner list, we will always agree.
• Restrict or object to processing, including anything we do on the basis of legitimate interests.
• Portability; receive what you gave us in a machine-readable form.
• Withdraw consent at any time, without giving a reason and without affecting anything done before you withdrew it.
• Complain to a data protection supervisory authority. In the UK, the Information Commissioner's Office; in the EU, the authority where you live or work. We would rather you told us first, but you do not have to.

To use any of these, write to the address in section 1. We will respond within one month, and we will not charge you or ask why.

7. Automated decision-making

There is none. Nothing here profiles you or makes a decision about you automatically.

8. Changes

If this notice changes materially, the date at the top changes, and where the change affects data we already hold we will email anyone on the design-partner list rather than relying on you to re-read the page.