Privacy Policy

Data we collect and why

We collect account data (email, name, team name), usage data necessary to run boards and cards, and payment-related data processed by our payment provider. We use this to provide the service, support you, and improve the product. We do not sell your personal data.

Legal basis and your rights (GDPR)

We process personal data on the basis of contract performance, legitimate interest (security, product improvement), and where applicable your consent. You have the right to access, rectify, erase, restrict processing, data portability, and to object. You may lodge a complaint with a supervisory authority. To exercise your rights, contact us at [email protected].

Data location and retention

Your data is stored and processed within the European Union. We retain your data for as long as your account is active and as required for legal or operational purposes. When you delete your account, we remove or anonymise your data in line with our retention policy.

Subprocessors

We use trusted subprocessors, all in the EU or with EU-compliant processing. They are bound by data processing agreements and process data in line with GDPR:

• Hetzner (Germany): application and database hosting
• Stripe (EU): payment processing
• Sentry (EU): error and performance monitoring
• PostHog (EU): product analytics
• AWS (EU): email delivery (SES), file and image storage (S3)
• Cloudflare: DDoS protection, caching, and edge delivery

A detailed or updated list is available on request at [email protected].