Privacy Policy - Chamaileon SDK
This Privacy Policy describes how EDMdesigner.com Kft. processes and protects information in connection with the use of the Chamaileon SDK product (“SDK”), including any associated developer dashboard, API services, and supporting infrastructure.
This policy applies exclusively to the SDK product line and its users. If you are using the main Chamaileon web application, please refer to our general Privacy Policy for relevant information.
1. Data Collection and User Responsibility
The Chamaileon SDK is designed to be embedded within customer platforms to facilitate email design and rendering functionality.
Chamaileon SDK does not collect or process any personal data from the end-users of our SDK customers.
The only data processed through the SDK is the design and content of emails created or rendered using the SDK.
As such, SDK customers (i.e., the companies or developers who integrate the SDK into their own platforms) are responsible for ensuring their own compliance with privacy laws (e.g., GDPR, CCPA) in connection with their end-users.
Chamaileon acts solely as a service provider in this context and does not assume responsibility for any personal data collected by SDK customers via their own platforms.
2. Diagnostic and Operational Data Collection
To maintain and improve the performance, stability, and reliability of the SDK and its associated dashboard, Chamaileon collects limited technical data.
This includes crash reports, API usage logs, and anonymized analytics related to SDK operations.
These data points are necessary for legitimate operational purposes and are processed based on Chamaileon’s legitimate interest in delivering a functional and reliable service.
No personally identifiable data from SDK end-users is collected as part of this process.
3. SDK Customer Accounts and Dashboard Access
SDK customers are provided access to a secure Chamaileon dashboard, which requires account creation and authentication.
This dashboard enables SDK customers to manage their API keys, view usage analytics, billing information, and access technical documentation.
While the core functionality of the Chamaileon SDK is accessed programmatically via API calls, this dashboard serves as the central hub for administrative tasks and account management.
All personal data collected through the dashboard (e.g., name, email address, billing details) is handled in accordance with our general Privacy Policy.
SDK customers may receive product updates, feature announcements, or service-related communications from Chamaileon.
You can manage your email preferences or opt out of communications at any time by using the unsubscribe link in our emails or by contacting sdk@chamaileon.io.
4. Definitions: SDK Customer vs. End-User
For clarity throughout this policy and any associated documentation:
-
“SDK Customer” or “Integrator” refers to the company, developer, or organization that embeds the Chamaileon SDK into their own platform or application.
-
“End-User” refers to the individual(s) who interact with the SDK within the context of the SDK customer’s platform (e.g., designing or previewing an email or other assets).
Chamaileon maintains a direct relationship only with the SDK Customer, not with the End-Users of the SDK Customer’s platform.
The SDK Customer is solely responsible for informing their End-Users of how their data is processed and for obtaining any necessary consent under applicable privacy regulations.
5. Data Retention
Chamaileon retains diagnostic and usage data collected via the SDK only as long as necessary for the purposes outlined in this policy.
SDK customers may request deletion of their data (including usage records and associated dashboard information) by contacting our support team at sdk@chamaileon.io. Deletion requests are honored in compliance with applicable laws and contractual obligations.
6. Cookies and Tracking
The SDK itself does not set cookies or use browser-based tracking mechanisms. However, if your integration environment adds cookie functionality or analytics, it is your responsibility to disclose and manage consent as appropriate.
The developer dashboard may use essential cookies for authentication and session management. For more information, please refer to the main Chamaileon Cookie Policy.
7. Third-Party Services
Some SDK-related services (e.g., image hosting, API processing, content rendering) may be powered by third-party cloud infrastructure (e.g., AWS).
These services are carefully selected to ensure compliance with industry security standards. In all cases, no personal end-user data is knowingly transmitted to third parties.
Email addresses of the SDK dashboard users and billing contacts are stored and processed by BlueFox.email APP - Innovaris Group LLC.
Billing information is passed to BrainTree, a PayPal company for card processing and Billingo Technologies Zrt for invoice processing. Card information is handled completely by BrainTree.
8. Security Measures
Chamaileon applies industry-standard security practices to protect SDK-related data. These include, but are not limited to:
- Encrypted API communication (HTTPS/TLS)
- Token-based authentication for SDK access
- Secure storage and role-based access control in the developer dashboard
- Regular vulnerability scans and system updates
- Annual renewal of ISO 27015/2 standards audit
If you believe you’ve found a vulnerability in our SDK or dashboard, please contact us immediately at sdk@chamaileon.io.
9. International Data Transfers
If telemetry or administrative data related to SDK usage is transferred to Chamaileon servers located outside your country of origin (e.g., to the European Union), such transfers are done under legally recognized mechanisms, including the use of Standard Contractual Clauses (SCCs) where applicable.
By default, all data stored on AWS-s US East (N. Virginia) location.
10. Data Subject Rights
If you are an SDK customer (i.e., developer or organization using the SDK), you have the right to:
- Access the personal data we store about you and your company
- Request corrections or deletions
- Withdraw consent (where applicable) to send you email notifications
- Request a copy of your data in a portable format
To exercise these rights, please contact us at sdk@chamaileon.io.
Please note: We do not have a direct relationship with the end-users of SDK customers. Any such requests from end-users must be addressed to the relevant SDK integrator.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through our website or via email to registered SDK customers.
12. Contact Us
If you have any questions or concerns regarding this Privacy Policy or how we handle SDK data, please contact:
EDMdesigner.com kft Privacy Officer: