Trust center

Compliance.
Documents.
Promises.

Privacy policy, DPA, terms of service, subprocessors and security disclosure, in one place. What we hold and what we do not, in writing.

Privacy

What data we collect, why, where it goes, how to remove it.

Data Processing Agreement

Available on request.

Plain English. No 50-page surprises.

Subprocessors

Supabase, Stripe, AWS SES, Inngest, Hetzner, Cloudflare, Sentry. Updated when changed.

Your data

Export your whole account whenever you want, with credentials redacted. Hosted in Germany.

Security disclosure

Found a vulnerability? Tell us here.

Security, in writing.

We do not hold SOC 2, ISO 27001 or HIPAA certification. What we can show you is on the security page.