Privacy Policy

Last Updated: September 25, 2026

Welcome to VDD Methodology (accessible via https://vdd-methodology.org). This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit, use, or interact with the open standard specification and resources hosted on this website.

This website is operated by Sofycod Sp. z o.o., the creator and primary maintainer of the Verification-Driven Delivery (VDD) Methodology.

For the purposes of the General Data Protection Regulation (GDPR) (EU 2016/679) and other applicable data protection legislation, the Data Controller responsible for your personal data collected through this website is:

Legal Entity Name: Sofycod Sp. z o.o.
Registered Office / Address: Hoża str, Nr 86, Lok. 210, Warsaw, 00-682, Poland
Email Contact: privacy@sofycod.com
General Enquiries & Support: orders@sofycod.com

If you have any questions regarding how your data is processed or wish to exercise your data privacy rights, please contact us using the details provided above.

We limit the collection of personal data to what is strictly necessary to provide, secure, and improve the VDD Methodology website and its associated open-source tools.

When you browse the site, our Google Cloud Platform infrastructure automatically logs standard technical information: 

• IP address (anonymized/pseudonymized where applicable)

• Browser type, version, and language settings

• Operating system and device characteristics

• Referral URLs, dates, timestamps, and pages visited

• Server performance and error logs

You may interact with us directly through contact forms, email inquiries, or resource requests (such as requesting the VDD Implementation Playbook, whitepapers, or strategic blueprints). This may include:

• Contact Information: Name, work email address, phone number

• Professional Information: Company name, job title, industry domain

• Communication Content: Message text, specific inquiries about VDD adoption, software architecture reviews, or commercial licensing requests

We process your personal data under the following legal bases pursuant to Article 6(1) of the EU GDPR:

We do not sell, rent, or trade your personal data to third parties. We only share information with third-party service providers (Data Processors) under strict contractual obligations of confidentiality and data security:

1. Infrastructure & Hosting Provider (Google Cloud Platform): Our website infrastructure, database storage, server hosting, and content delivery networks are hosted on Google Cloud Platform (Google Ireland Limited / Google LLC). Data processing occurs in Google Cloud’s secure European data center facilities.

2. Email Delivery Service (Resend): When you submit a form on this website including the contact form or the download request form we use Resend (operated by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) to send you the resulting email (for example, a reply to your inquiry or the requested download links). We share with Resend only the personal data necessary to send that specific email: your email address, and, depending on the form, your name and the content of your message. We do not use Resend, or the data shared with it through these forms, for newsletters, marketing emails, or any purpose beyond fulfilling the specific request you made.

3. Analytics Providers: Privacy-friendly or anonymized web analytics tools used to count site visits and track specification downloads.

4. Legal Compliance & Law Enforcement: We may disclose data if required by EU or Polish law, court orders, or enforceable governmental requests.

As Sofycod Sp. z o.o. operates within the European Union (Poland), most of your data including website hosting, infrastructure, and server logs is processed within Google Cloud's European data centers.

One exception is the delivery of transactional emails from this website's forms, which is handled by Resend (Plus Five Five, Inc., USA). Resend's primary data processing takes place in the United States. This transfer is safeguarded by:

• Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our Data Processing Agreement with Resend.

• Resend's participation in the EU-U.S. Data Privacy Framework (including its UK Extension), under which the European Commission has recognized the United States as providing an adequate level of protection for personal data transferred to certified participants.

• Resend retains this email and log data for 30 days, after which it is automatically deleted, in accordance with Resend's own data retention practices.

You can review Resend's Data Processing Addendum at resend.com/legal/dpa and its Privacy Policy at resend.com/legal/privacy for further detail on how it processes and safeguards data on our behalf.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Server Logs & Technical Data (Google Cloud): Retained for a maximum of 30 to 90 days, after which it is automatically deleted or anonymized.

• Inquiries & Business Correspondence: Retained for the duration of the communication and up to 3 years following the last interaction, unless longer retention is required by tax or commercial laws.

If you are a resident of the European Union / European Economic Area, you have the following rights regarding your personal data:

• Right of Access (Art. 15): Request confirmation of whether we process your personal data and obtain a copy.

• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.

• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data under certain conditions.

• Right to Restriction of Processing (Art. 18): Request that we temporarily limit the processing of your data.

• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.

• Right to Object (Art. 21): Object to processing based on our legitimate interests.

• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@sofycod.com.

You also have the right to lodge a complaint with a Data Protection Supervisory Authority. In Poland, the relevant authority is:

Urzęd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warszawa, Poland
Website: https://uodo.gov.pl

The vdd-methodology.org website uses cookies and similar technologies to ensure proper site functionality and analyze traffic patterns.

Strictly Necessary Cookies: Required for basic site navigation, security, and accessibility. These do not require user consent.

Analytical Cookies: Used to understand how visitors interact with the VDD specification. These are deployed only with your consent where required by law.

For detailed information about the specific cookies used and how to manage your preferences, please review our Cookie Policy (or manage settings via our Cookie Consent Banner).

Related Sofycod Sites. This website links to other properties operated by Sofycod Sp. z o.o., including sofycod.com (our corporate website) and alexlipanov.com (a personal site operated by Sofycod Sp. z o.o. on behalf of its founder). These are not third-party sites each has its own Privacy Policy and Terms of Service specific to that site's purpose, which we encourage you to review when visiting them.

Genuinely Third-Party Links. This website also contains links to services and documentation we do not operate, including Creative Commons licensing pages.

Sofycod Sp. z o.o. has no control over genuinely third-party content or privacy practices.

A link to a third-party website does not imply endorsement or responsibility for the material contained on that website.

We may update this Privacy Policy from time to time to reflect updates in our practices, technology, or legal requirements. Any updates will be posted on this page with an updated "Last Updated" date.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:

Sofycod Sp. z o.o. , Hoża str, Nr 86, Lok. 210, Warsaw, 00-682, Poland
Email: privacy@sofycod.com
Website: https://sofycod.com