Privacy Policy

1. Introduction

The protection of your personal data is important to us. This privacy policy informs you about the processing of personal data when using the Sanctions Compliance Platform.

2. Data Controller

3. Data Collected

We collect and process the following personal data:

• Registration data: Name, email address
• Usage data: Search queries, API calls, timestamps
• Payment data: processed directly by Stripe
• Technical data: IP address, browser type, device information

4. Purpose of Data Processing

• Providing and improving our services
• Billing and payment processing
• Communication with users (support, notifications)
• Fulfilling legal obligations

5. Legal Basis

Processing is based on Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(a) GDPR (consent), and Art. 6(1)(f) GDPR (legitimate interests).

6. Third Party Sharing

We only share your data with third parties as necessary for contract performance:

• Auth0 (Authentication) - Privacy Policy: https://auth0.com/privacy
• Stripe (Payment Processing) - Privacy Policy: https://stripe.com/privacy

7. Data Retention

Personal data is deleted as soon as the purpose of storage no longer applies. Search queries are anonymized after account deletion. Billing data is stored according to legal retention periods (10 years).

8. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

9. Cookies

We only use technically necessary cookies for authentication and language settings. These cookies are required for the operation of the platform and cannot be disabled.

10. Changes

We reserve the right to update this privacy policy. The current version is always available on our website.