DRAFT. Fill in the fields in [brackets] and have a professional review this text before you launch.

Privacy Policy

Controller: [YOUR NAME OR COMPANY], [ADDRESS]. Contact: [CONTACT EMAIL]. Last updated: [DATE].

What we collect

• Your email address and your password. The password is stored only as a hash by our login provider; we never see it.
• Your plan data: status, plan, end date, and your customer ID at the payment provider.
• Technical data such as your IP address, which our hosting provider processes to deliver the site and keep it safe.

We do not see your card number: card payments are handled by Stripe. We do not use advertising or analytics cookies. Your browser stores your login session and your theme choice in local storage so the site works.

Why we use it

To create your account, give you access to the board, take payments and keep the service secure. The legal basis is the contract with you and our legitimate interest in security.

Who processes it

• Supabase: accounts and plan data.
• Stripe: payments and billing.
• Cloudflare: hosting and delivery.

These providers may process data outside the European Economic Area under the safeguards required by law. [CHECK THE CURRENT TRANSFER MECHANISM OF EACH PROVIDER.]

How long we keep it

While your account exists. Billing records may be kept for as long as tax law requires. [CONFIRM THE PERIODS.]

Your rights

You can ask us to access, correct, delete or export your data, and to restrict or object to its use. Write to [CONTACT EMAIL]. You can also complain to your data protection authority (in Ireland, the Data Protection Commission).