Your data: export and deletion¶
At the end of the beta¶
When your organization's beta ends, the beta is marked as ended in the console. Data export and deletion at that point are handled manually by the Hodeitek team under the beta terms: write to info@hodeitek.com to ask for your data to be exported or deleted. It is not done from a screen in the console. Backups expire as set out in the data processing agreement.
The conditions are in the beta terms and summarised in Beta conditions.
Your own data, from the console¶
Under My account › Privacy any user can:
- Export my data (button Request export): download a copy, in JSON, of your personal data, activity and configuration. It includes your profile, your organization and tenant memberships, your consents, and the vendors, assets, alerts, compliance snapshots, questionnaires and HodeiAI conversations of the tenants you can see. It can be requested once per hour.
- Processing restriction (button Request restriction): restrict the processing of your personal data (GDPR Art. 18).
- Delete my account: self-service and irreversible. Click Delete my account, enter your
password, type
DELETEand click Confirm deletion. Your email address is replaced and your name removed, the account is deactivated, you can no longer sign in and every open session is closed. Audit logs are kept for legal retention.
Deleting your account is done by you in the console. Deleting the data of a tenant, and anything the export does not cover, is handled manually: write to info@hodeitek.com and the request is handled by the Hodeitek team.
To exercise any other right (access, rectification, erasure, objection, portability), write to privacy@hodeitek.com. The console privacy notice is public at app.hodeishield.com/privacy.
Export when access is suspended or about to end¶
If your licence is suspended, or in its grace period, the console shows an Export my data button (on the suspended-access screen and in the grace-period banner) to organization and tenant administrators. It downloads a JSON file with the tenant's basic details and its list of vendors and assets. It is a summary, not a copy of everything stored in the tenant: for a complete export, write to info@hodeitek.com.
Data processing agreement¶
Hodeitek processes the data you load as data processor, under a data processing agreement in line with Article 28 of the GDPR. It is signed when the beta account is created, before any personal data is loaded: until then, use test data. The list of subprocessors is an annex to that agreement and is also on the Subprocessors page. On the MSSP path, each client is the controller of its data and the MSSP needs the client's written authorisation before loading it; the details are in the beta terms. The privacy notice of hodeishield.com describes how Hodeitek handles personal data collected on the website.