powabase

Privacy Policy

Last updated: July 5, 2025

Introduction

We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

Data Controller

The data controller responsible for your personal data is:

Christian Fürst
Fasanweg 16
30926 Seelze
Germany
E-Mail: [email protected]

Data Collection and Use

Personal Data We Collect

We collect and process the following types of personal data:

  • Account information (name, email address)
  • Usage data and analytics
  • Technical information (IP address, browser type)
  • Communication data (support requests, feedback)

Purposes of Data Processing

We process your personal data for the following purposes:

  • Providing and improving our services
  • User authentication and account management
  • Communication and customer support
  • Analytics and service optimization
Legal Basis

We process your personal data based on the following legal grounds under GDPR:

  • Consent (Article 6(1)(a) GDPR)
  • Contract performance (Article 6(1)(b) GDPR)
  • Legitimate interests (Article 6(1)(f) GDPR)
  • Legal obligation (Article 6(1)(c) GDPR)
Data Sharing

We do not sell, trade, or otherwise transfer your personal data to third parties except as described in this Privacy Policy. We may share your data with:

  • Service providers and business partners
  • Legal authorities when required by law
  • Third parties with your explicit consent
Third-Party Service Providers

We use the following third-party service providers to operate our services. These processors are carefully selected and contractually bound to protect your data in accordance with GDPR requirements:

Supabase Inc.

Purpose: Backend infrastructure, database services, and user authentication
Data Processed: Account information, authentication data, application data
Location: EU Central (Frankfurt, Germany) on AWS
Legal Basis: Legitimate interest (Article 6(1)(f) GDPR) for service provision
Safeguards: SOC2 Type 2 certified, HIPAA compliant, EU-based data processing
Retention: Data retained according to our retention policy or until account deletion

Hetzner Online GmbH

Purpose: Cloud infrastructure and hosting services for custom backend services
Data Processed: Technical data, server logs, monitoring data
Location: Germany (EU)
Legal Basis: Legitimate interest (Article 6(1)(f) GDPR) for service provision
Safeguards: EU-based provider, GDPR compliant, Data Processing Agreement in place
Retention: Technical logs retained for security and troubleshooting purposes, typically 30-90 days

Contact Information for Processors

For Supabase privacy inquiries: [email protected]

For Hetzner privacy inquiries: [email protected]

Your Rights Regarding Third-Party Processing

You have the same rights regarding data processed by our third-party providers as outlined in the 'Your Rights' section. If you wish to exercise these rights specifically regarding third-party processing, please contact us and we will coordinate with the relevant processor.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure (right to be forgotten)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our website. You can control cookie settings through your browser preferences.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

E-Mail: [email protected]
Christian Fürst
Fasanweg 16
30926 Seelze
Germany

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the 'Last updated' date.