Privacy Policy
This policy describes how personal data is processed in connection with the PhoenixCore OS information website at https://phoenixcoreos.org (the "Site"). The main website https://ritualforgelabs.com has its own privacy policy, which applies to it.
1. Controller
- Trade name: RitualForge Labs. PhoenixCore OS is a project developed under the RitualForge Labs brand and is not a separate legal entity.
- Email contact: info@ritualforgelabs.com
- The project is currently developed under the RitualForge Labs brand. A legal entity is in the process of being established; company details will be published after registration. Contact: info@ritualforgelabs.com.
- Data protection officer: not appointed.
2. What data we process
Server technical logs. On every visit, the hosting provider's web server automatically records: IP address, date and time, requested address (URL), HTTP status, response size, referring address (referrer) and browser information (User-Agent).
Email correspondence. When you write to info@ritualforgelabs.com, we process your email address, your name and any data you choose to include in the message and its attachments.
Future demo requests. The Site currently has no forms, accounts or demo requests. If such a feature is introduced, we will publish updated information beforehand. This service is not yet active.
What we do not collect. The Site does not use cookies, analytics, advertising pixels, telemetry, hardware identifiers or user profiles. The Site does not distribute the operating system and receives no data from its installations.
3. Purposes and legal bases
- Server logs: ensuring the operation and security of the Site, detecting and preventing abuse and errors — legitimate interest (Art. 6(1)(f) of Regulation (EU) 2016/679, GDPR).
- Replying to email inquiries: legitimate interest in answering messages received (Art. 6(1)(f)) and, for commercial inquiries, taking steps at your request prior to entering into a contract (Art. 6(1)(b)).
- Compliance with legal obligations where they arise (Art. 6(1)(c)).
We do not take decisions based solely on automated processing, including profiling.
4. Recipients and processors
- SuperHosting.BG — hosting provider on whose servers the Site is located and server logs are stored; acts as a processor. Processing takes place under the provider's terms.
- The provider of the mailbox service for info@ritualforgelabs.com — for storing and delivering email messages.
- Competent public authorities — only where required by law.
We do not sell personal data or share it for advertising.
5. Transfers outside the EU/EEA
The Site does not load external resources: fonts, images and icons are served from its own server. We are not aware of any transfer of data from the Site outside the EU/EEA. If this changes, we will update this policy.
6. Retention
- Server logs: under the current hosting account settings, access logs are kept for the current month, archived at the end of the month, and the previous month's archive is deleted — i.e. usually up to about two months. The hosting provider's backups are kept according to its own terms.
- Email correspondence: as long as necessary to handle the inquiry and follow-up communication, but no longer than 24 months after the last correspondence, unless a longer period is required by law or for the defence of legal claims.
7. Future services
The future components described on the Site — licensing, activation, enterprise server, the future, not yet active connection of PhoenixCore Guardian to a central AI server, remote support — are not active and currently process no personal data. They are not covered by this policy. Separate privacy information and contractual terms will be provided before they are introduced.
8. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability where applicable (Art. 20), and to object to processing based on legitimate interest (Art. 21).
To exercise your rights, write to info@ritualforgelabs.com. We will respond without undue delay and at the latest within one month, which may be extended by two further months for complex or numerous requests (Art. 12(3)). We may ask for information needed to confirm your identity.
9. Right to lodge a complaint
You may lodge a complaint with the Bulgarian supervisory authority:
Commission for Personal Data Protection (КЗЛД / CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria; email: kzld@cpdp.bg; phone: +359 2 91 53 519; www.cpdp.bg
You may also contact the supervisory authority in the EU member state of your habitual residence or place of work.
10. Children
The Site is not directed at children and we do not knowingly collect children's data.
11. Changes
We may update this policy. The current version and the date of the last update are published on this page.