Privacy policy
Effective from [date]
Controller
The data controller is [Název provozovatele, s.r.o.], IČO [IČO], [Sídlo]. Privacy contact: [kontaktní e-mail].
What we process
Account data: e-mail, name, profile picture, a password hash (we never store the password itself), team role.
Content: projects, library files and conversations with the AI assistant.
Billing data: handled by Stripe; we never see your card number.
Technical data: sign-in records and AI usage (for limits and billing).
Why and on what basis
Providing the service and performing the contract, billing (legal obligation), security and abuse prevention (legitimate interest), service e-mails (contract).
Processors
Vercel (hosting and file storage), Neon (database), Resend (e-mail delivery), Stripe (payments), Anthropic and OpenAI (AI assistant, only when you use it). Some processors are based in the USA; transfers rely on the EU Standard Contractual Clauses.
Retention
For as long as the account exists. After closing it we delete the data within 30 days, except where the law requires us to keep it (e.g. accounting records).
Cookies
We only use cookies necessary for signing in. App preferences are stored in your browser’s storage. We use no third-party advertising or analytics cookies.
Your rights
You have the right to access, rectify, erase, restrict, port your data and to object. You can lodge a complaint with your data protection authority (in Czechia: uoou.cz).