Privacy Policy

1. Controller

SNI UG (haftungsbeschränkt), Haßlocher Str. 63, 68219 Mannheim, Germany

Managing director: Christian Willmann · Email: christian@willmann.com.de

2. What data we process

• Account: username, email address, password (only as a scrypt hash), email confirmation status.
• Project data: your building/object/group-address structures (usually no personal data).
• Session/login tokens: stored only as a hash.
• Abuse protection: your IP address is used only briefly in memory for rate limiting and not stored permanently.
• Payment: for a paid license, your email and project/size details are passed to Stripe. Card data is processed solely by Stripe.

3. Purposes and legal bases

• Providing the account and tool — Art. 6(1)(b) GDPR (contract).
• Abuse protection (rate limiting) — Art. 6(1)(f) GDPR.
• Payment processing — Art. 6(1)(b) GDPR.
• Retention of payment/invoice records — Art. 6(1)(c) GDPR (§ 147 AO, German Fiscal Code).

4. Recipients / processors

• Hetzner Online GmbH — hosting, server location Germany.
• Google Workspace — sending account/login emails.
• Stripe Payments Europe, Ltd. — payment processing.

A data processing agreement is in place with each; transfers to third countries rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

5. Retention

Account and projects until you delete them (any time in the app). Sessions/tokens have short lifetimes with automatic cleanup; demo projects are deleted daily. Payment/invoice records are subject to statutory retention periods at Stripe.

6. Your rights

Access (Art. 15), rectification (16), erasure (17), restriction (18), data portability (20), objection (21), and the right to lodge a complaint with a supervisory authority (77). You can export your account profile in the app and your projects as CSV/XML.

7. Cookies

Only a technically necessary session cookie is set. No tracking, no analytics, no advertising cookies.