GDPR

Our key commitments

• Personal data protection by design and by default across all features and integrations.
• Security controls covering access management, session handling, file uploads, and audit logging.
• Handling of data subject requests within the timeframes required by applicable law.
• Data minimization: we collect only what we need to deliver the platform and the services you have requested.

Your rights as a data subject

Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, as well as to object to certain types of processing and to withdraw consent at any time.

• Access and download a copy of your data from your account settings.
• Request rectification of inaccurate or outdated information.
• Request deletion of your account and associated personal data.
• Lodge a complaint with your local data protection authority.

Lawful bases for processing

We process personal data only when we have a lawful basis to do so: to perform a contract with you, to comply with a legal obligation, with your consent, or based on our legitimate interests, balanced against your rights and freedoms.

International transfers

Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses and assess the privacy practices of our processors.

Data retention

Personal data is retained only for as long as necessary to deliver the platform, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are detailed in our Privacy Policy.

Sub-processors

We rely on a limited list of trusted sub-processors (for example, hosting and email delivery providers) selected for their security posture and GDPR compliance. The list is available on request.

Transparency & accountability

Processing activities are documented in our internal Records of Processing and reviewed regularly. We continuously refine our technical and organizational measures to reduce risk and respect user privacy.

Get in touch

For any privacy-related question or to exercise your rights, contact us using the address shown at the bottom of this page. We aim to respond within 30 days.