Privacy Notice
How we process personal data as a controller (accounts, billing, security).
Controller
[Company legal name], [Address], [privacy@company.com]. Data protection officer: [name/contact, if appointed].
What we process
Account data (name, e-mail, password hash), organization and membership data, billing data, usage and credit records, security logs (IP address, user agent), audit logs of generations, consents and exports.
Purposes and legal bases
Providing the Service and billing (Art. 6(1)(b) GDPR); security, fraud and abuse prevention, audit trail (Art. 6(1)(f), legitimate interests); legal obligations such as tax records (Art. 6(1)(c)). Content you upload is processed on your behalf under the DPA.
Retention
Account data for the duration of the contract; audit and security logs for [12 months]; billing records per statutory retention periods.
Your rights
Access, rectification, erasure, restriction, portability and objection; right to lodge a complaint with a supervisory authority. US residents: rights under applicable state privacy laws (e.g. CCPA/CPRA) — we do not sell or share personal information.
Cookies
We only use strictly necessary cookies (session, workspace selection, security). No tracking cookies.