Privacy policy

Who is responsible

[Company name], [Company address], is the controller of your personal data. Contact for all privacy questions: [privacy contact email].

What we store

Account: your name, email address and a one-way hash of your password (the password itself is never stored).

Content you enter: projects, change descriptions, requirements (including screenshots you upload), user stories, systems and templates.

Usage: the number and cost of AI runs per project, to apply the limits of your plan.

Payments: handled by Stripe; we only store the Stripe customer and subscription reference, never card details.

Security: a session token (stored only as a hash) and, for 24 hours, a keyed hash of email addresses with failed sign-in attempts. We do not store IP addresses.

Why and on what legal basis

To provide the service you signed up for (GDPR Art. 6(1)(b) — contract): your account, projects, AI analysis and documents.

To keep the service secure and prevent abuse (Art. 6(1)(f) — legitimate interest): sign-in rate limiting, usage limits.

To meet legal obligations such as accounting for paid plans (Art. 6(1)(c)).

AI processing

When you run an impact analysis or ask for suggested requirements or tests, the text of that project is sent to Anthropic (Claude API) to generate the draft. Anthropic processes it as our processor and does not use API data to train its models. Do not enter confidential customer data unless your organisation allows it.

Who processes data for us

Hetzner Online GmbH (Germany) — hosting in the EU.

Anthropic PBC (USA) — AI processing of the project text you submit; transfers are covered by the EU Standard Contractual Clauses.

Our email provider — sending confirmation and password-reset emails.

Stripe — payments for paid plans.

How we protect it

Your name, email address and all project text are encrypted in the database (AES-256-GCM); the key is kept separately from the database and its backups.

Passwords are hashed with scrypt; session and email-link tokens are stored only as hashes and expire.

All traffic uses HTTPS. Each account can only see its own data.

How long we keep it

Until you delete your account — then immediately and permanently, apart from backups, which are overwritten within 30 days.

Unconfirmed registrations: deleted after 7 days. Sessions: 30 days. Email links: 24 hours (confirmation) or 1 hour (password reset). Failed sign-in records: 24 hours.

Invoices for paid plans are kept by Stripe and us as long as accounting law requires.

Your rights

You can download all your data (Account → Download all my data), correct your name, and delete your account and all data at any time (Account → Delete account).

You also have the right to restrict or object to processing and to lodge a complaint with a data protection authority — in Bosnia and Herzegovina the Personal Data Protection Agency, in the EU the authority of your country.

Cookies

We only use strictly necessary cookies: the session cookie (to keep you signed in) and the language cookie. The light/dark theme is remembered in your browser's local storage. No analytics or advertising cookies, so no cookie banner is needed.

Changes

If this policy changes materially we will tell you by email and ask you to accept the new version.