Data Privacy

Privacy Policy

Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

GDPR Compliance Statement

We are committed to processing personal data in accordance with the General Data Protection Regulation (GDPR). The legal bases for processing your data are:

  • Contract fulfillment (Article 6(1)(b) GDPR)
  • Legal obligations (Article 6(1)(c) GDPR)
  • Legitimate interests (Article 6(1)(f) GDPR)
  • Your consent (Article 6(1)(a) GDPR)

Data Collection and Processing

Before Registration

  • Basic browser information for compatibility
  • IP address for security purposes
  • Session cookies for website functionality

During Registration

  • Email address
  • Password (encrypted)
  • Registration timestamp
  • IP address for security verification

For Registered Users

  • Subscription status and history
  • Service usage statistics (locally only)
  • Payment information (processed by Stripe, not stored on our servers)
  • Account preferences

Analytics and Usage Data

Matomo Analytics

We use Matomo Analytics, a privacy-focused analytics platform, to understand how our service is used and to improve user experience. Unlike traditional analytics services, all data collected through Matomo is:

  • Stored exclusively on our own servers within the Dataforest Data Center in Germany
  • Never shared with third parties
  • Processed in full compliance with GDPR requirements
  • Retained only for the duration necessary for analysis

Data Collected by Matomo

  • Page visits and navigation patterns
  • Time spent on different features
  • Technical information (browser type, device type)
  • Performance metrics
  • Feature usage statistics

Purpose of Analytics

  • Improve user interface and experience
  • Identify and resolve technical issues
  • Optimize service performance
  • Understand user needs and preferences
  • Guide feature development decisions

Data Storage and Security

All analytics data is stored securely in our dedicated infrastructure within the Dataforest Data Center, ensuring:

  • Data sovereignty within Germany
  • State-of-the-art security measures
  • Regular security audits and updates
  • Strict access controls
  • Encrypted storage and transmission

Data Processing Principles

We process your data following these GDPR principles:

  • Lawfulness, fairness, and transparency
  • Purpose limitation
  • Data minimization
  • Accuracy
  • Storage limitation
  • Integrity and confidentiality

Your Rights Under GDPR

Right to Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate personal data

Right to Erasure

Request deletion of your personal data

Right to Data Portability

Receive and transfer your data

Data Protection Measures

Technical Measures

  • SSL/TLS encryption for all data transfers
  • Regular security audits and updates
  • Secure data storage with encryption at rest
  • Access control and authentication mechanisms

Data Storage and Processing Location

Our data storage services are provided by dataForest GmbH, located in Germany. All user data is stored and processed in their secure German data centers in compliance with GDPR requirements and German data protection laws.

Data Center Details

  • Location: Germany
  • Provider: dataForest GmbH
  • Compliance: GDPR and German data protection laws
  • Data residency: European Union

Security Measures

  • ISO 27001 certified data centers
  • Physical security measures
  • Regular security audits
  • Encrypted data storage
  • 24/7 monitoring

By choosing German data centers, we ensure that your data is protected by some of the strictest data protection laws in the world, providing you with the highest level of data privacy and security.

Data Retention and Deletion

We retain your data for the minimum time necessary:

  • Active accounts: Duration of account existence
  • Deleted accounts: 30 days for backup purposes
  • Payment records: As required by law (typically 7 years)
  • Usage logs: 90 days maximum

Contact Information

TM Infotech Kft.

9325 Sopronnémeti, Hunyadi utca 3/a

Hungary

Company Registration Number: 08-09-034842

Tax ID: 32053461-2-08

Last updated: December 22, 2024