Privacy Policy

1. Controller

[Placeholder: controller within the meaning of the GDPR — legal entity, address, contact; data protection officer if appointed.]

2. Data processed at sign-up

At sign-up we process: your organisation's name, your name, your business e-mail address, the chosen workspace address and the selected plan; on paid plans additionally billing details (e.g. billing address, VAT ID).

As evidence of consent we store: the time of acceptance, the IP address and the version of the accepted documents.

To protect against automated abuse we use Cloudflare Turnstile, in the course of which Cloudflare processes technical connection data. [Placeholder: legal basis and reference to Cloudflare's privacy notice.]

3. Purposes and legal bases

Processing serves the provision of the workspace and the initiation and performance of the contract (Art. 6(1)(b) GDPR) as well as abuse prevention (Art. 6(1)(f) GDPR). [Placeholder: complete mapping pending legal review.]

4. Recipients and processors

[Placeholder: hosting location, e-mail delivery provider (SMTP relay), Cloudflare; data processing agreements.]

5. Retention

Sign-up records that do not lead to a workspace (e.g. unconfirmed requests) are deleted automatically after short windows; completed sign-up records are removed 30 days after completion. The provisioned workspace itself is governed by the contractual terms.

[Placeholder: retention of invoicing data under commercial and tax law.]

6. Your rights

Under the GDPR you have in particular the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. [Placeholder: contact channel for data subject requests.]