Privacy Policy

Last updated: [Month Year]

1. Controller

The controller within the meaning of the GDPR is:
[Full name]
[Address]
Email: [Email address]

2. Data we collect

We collect and process the following personal data:

  • Email address (upon registration and login)
  • Project data entered by the user (project title, scope of work, deadlines, pricing)
  • Timestamps of project confirmations
  • IP address when the confirmation page is accessed
  • Optionally: logo and studio name (for Pro users)

3. Purpose of data processing

The collected data is processed exclusively for the following purposes:

  • Providing and operating the Shakeon service
  • Authentication and account management
  • Documenting project confirmations
  • Sending transactional emails (confirmations, reminders)
  • Payment processing (for Pro subscriptions)

4. Legal basis

Processing is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in operating the service).

5. Third-party processors

We use the following third-party service providers:

  • Supabase (database hosting and authentication) — Supabase Inc., USA. Data is hosted in the EU.
  • Vercel (hosting) — Vercel Inc., USA. Server location: USA/EU.
  • Resend (email delivery) — Resend Inc., USA.
  • Stripe (payment processing) — Stripe Inc., USA. Processes payment data under its own privacy policy.

Data processing agreements (DPAs) in accordance with Art. 28 GDPR are in place with all providers.

6. Retention period

Data is retained for as long as the user account is active. Upon account deletion, personal data is removed within 30 days, unless statutory retention obligations require otherwise.

7. Your rights

You have the right to:

  • Access your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)

To exercise your rights, please contact: [Email address]

You also have the right to lodge a complaint with a data protection authority. The competent authority is the supervisory authority of your country of residence.

8. Cookies

Shakeon uses only technically necessary cookies for authentication (Supabase session cookie). No tracking or marketing cookies are used.

9. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in law or changes to the service. The current version is always available at this URL.

← Back to homepageLegal NoticeTerms of Service