Privacy Notice
Version 2026-09-04
This is a generic template a product customizes before launch — not reviewed legal advice for any specific jurisdiction, business or product.
This notice explains what this product collects about you, why, where it is stored, and the rights you have over it.
1. What we collect
Depending on which parts of the product you use, this can include:
- Account information you provide — name, email address, and your preferences.
- Content you create or upload while using the service, and metadata about it (when it was created, by whom).
- Usage and diagnostic information — sign-in events, feature usage, and error reports, used to keep the service working and secure.
- Billing information, where the product has paid plans — handled by a payment processor, never stored by this product as raw card details.
2. How we use it
To provide the service you signed up for, to keep your account secure, to respond when you contact support, and to meet legal obligations (tax and accounting records, for example). We do not sell personal data.
3. Who else sees it
A small number of service providers process data on our behalf to run the product — for example, email delivery for notifications and account verification, and payment processing for paid plans. Each is bound by its own data-processing terms and may only use the data to provide that service.
Where an organization account has multiple members, other members of that organization can see the content and activity the organization's plan and roles give them access to — that is a feature of shared accounts, not a third-party disclosure.
4. Retention, export and erasure
You can download a full export of your data, or permanently erase your account and everything attached to it, at any time — see your account's data settings. Erasure is immediate on the live database; it does not reach into a backup made before the request, and a small number of records (billing and accounting history, and the internal record that an erasure happened) are retained as required by law even after an account is erased.
5. Your rights
Subject to local law, you have the right to:
- Access the personal data held about you (the export above does this directly).
- Correct inaccurate data — update your profile, or contact us for anything you cannot edit yourself.
- Erase your data (the erasure flow above does this directly).
- Object to, or ask us to restrict, certain processing.
- Receive your data in a portable format (the export above is machine-readable).
- Lodge a complaint with your local data protection authority.
6. Where your data lives
Data at rest is stored in the EU. Compute is not regional — requests are served from whichever edge location is nearest you, wherever that is. The honest summary is EU storage, global compute: this product is not "EU-hosted" in the sense that every request is handled inside the EU, only in the sense that where your data is stored at rest is fixed to the EU.
7. Security
Credentials are never stored in plain text. Access to production data is limited to what operating the service requires, and administrative access to an individual account is recorded.
8. Changes to this notice
A meaningful change bumps the version shown above and re-prompts you to accept it the next time you sign in.
9. Contact
Privacy requests and questions: replace this line with your organization's designated privacy contact (a mailbox such as privacy@your-domain.example, or a data protection officer where one is required).