Privacy Policy

1. Information We Collect

1.1 Technical Information

• IP Address: For rate limiting and security purposes
• User Agent: To identify browsers and prevent automated abuse
• Request Logs: API endpoint access for monitoring and security
• Usage Statistics: Aggregate data on table lookups and searches

1.2 SAP Table Data

• Table Names: SAP table identifiers you search for
• Search History: Temporarily cached for performance optimization
• Public SAP Documentation: Cached from publicly available sources

1.3 Cookies and Local Storage

• Essential Cookies: For basic site functionality and security
• Preferences: Theme settings and display preferences
• Session Data: Temporary data for improved user experience

2. How We Use Your Information

2.1 Service Provision

• Provide SAP table documentation and field definitions
• Cache frequently requested data for improved performance
• Personalize your experience with saved preferences

2.2 Security and Compliance

• Prevent abuse and protect against security threats
• Enforce rate limits to ensure fair usage
• Maintain audit logs as required by security standards
• Comply with GDPR, ISO 27001, and other regulatory requirements

2.3 Service Improvement

• Analyze usage patterns to improve performance
• Identify popular SAP tables for better caching
• Monitor system health and performance metrics

3. Legal Basis for Processing (GDPR)

4. Data Retention

5. Your Rights (GDPR)

6. Data Security

6.1 Technical Measures

• Encryption: All data encrypted at rest and in transit using industry-standard protocols
• Access Controls: Role-based access with multi-factor authentication
• Rate Limiting: Advanced protection against abuse and DDoS attacks
• Monitoring: 24/7 security monitoring and threat detection

6.2 Organizational Measures

• Staff Training: Regular security awareness and privacy training
• Incident Response: Documented procedures for security incidents
• Compliance: Regular audits and compliance assessments
• Data Minimization: We collect only necessary data for service provision

7. Third-Party Services

8. International Transfers

Your data may be processed in countries outside your location. We ensure adequate protection through:

• Adequacy Decisions: Transfers to countries with adequate data protection
• Standard Contractual Clauses: EU-approved safeguards for international transfers
• Technical Safeguards: Encryption and access controls for all international processing

9. Children's Privacy

Our service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• For material changes, providing prominent notice on our website