Privacy Policy

Scope and GDPR Roles

For account and billing data, we act as a data controller. For customer content processed on your behalf, we generally act as a data processor under your instructions.

Data We Collect

• Account details (name, email, organization, authentication data).
• Billing and transaction data, including plan and payment status.
• Service usage data, device/browser logs, and diagnostics.
• Support communications and feedback you send to us.

Lawful Bases (GDPR)

• Contract performance to provide and maintain the service.
• Legitimate interests to secure, improve, and operate the platform.
• Legal obligations, including accounting, tax, and compliance duties.
• Consent where required, which you may withdraw at any time.

How We Use Data

We use data to deliver features, authenticate users, process payments, provide support, prevent abuse, meet legal requirements, and improve product performance and reliability.

Sharing and International Transfers

We share data only with vetted service providers, professional advisors, or authorities when legally required. Where data is transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses.

Data Retention

We retain personal data only for as long as needed for the purposes above, then delete or anonymize it, unless longer retention is required by law or to resolve disputes and enforce agreements.

Your Rights

• Access, correct, or delete your personal data.
• Restrict or object to certain processing.
• Request data portability where applicable.
• Withdraw consent and lodge a complaint with a supervisory authority.

Security and Contact

We apply technical and organizational measures to protect personal data. If you have privacy requests or concerns, contact us through our support or legal contact channel.