Datenschutzrichtlinie

1. Wer wir sind

Für die Zwecke des UK Data Protection Act 2018 und der DSGVO ist der Datenverantwortliche Godsall.Dev (tätig als "Kordra").

2. Informationen, die wir sammeln

Wir sammeln Informationen, die Sie uns direkt zur Verfügung stellen, wenn Sie sich für ein Konto registrieren, ein Projekt erstellen oder mit uns kommunizieren. Dies kann beinhalten:

• Persönliche Identifikatoren (Name, E-Mail-Adresse)
• Authentifizierungsdaten
• Zahlungsinformationen (sicher verarbeitet durch Stripe)
• Nutzergenerierte Inhalte (Texte, Songstrukturen, Projektdaten)

3. Wie wir Ihre Informationen nutzen

Wir nutzen die gesammelten Informationen, um:

• Unsere Dienste bereitzustellen, zu warten und zu verbessern
• Transaktionen zu verarbeiten und verwandte Informationen zu senden
• Ihnen technische Hinweise, Updates, Sicherheitswarnungen und Support-Nachrichten zu senden

4. Sharing Your Data & Third-Party Services

We do not sell your personal data. We only share your data with trusted third-party processors necessary to operate our Service:

• Payment Processors: Stripe (for secure subscription billing).
• Hosting & Database Providers: Supabase (for secure cloud storage and database hosting).
• AI Providers: Third-party AI models used to generate your requested content.

5. International Data Transfers

Because some of our third-party service providers (like Stripe, Supabase, and our AI partners) are based outside of the UK (e.g., in the United States), your data may be transferred internationally. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by utilizing UK-approved standard contractual clauses or verifying the recipient country has an adequacy decision.

6. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, or accounting requirements. If you delete your account, your user-generated content and personal data will be deleted or anonymized, except where we are required by law to retain transaction records.

7. Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• The right to access: Request a copy of the personal data we hold about you.
• The right to rectification: Request that we correct any inaccurate or incomplete data.
• The right to erasure ("Right to be forgotten"): Request that we delete your personal data.
• The right to restrict or object to processing: Ask us to pause or stop processing your data under certain circumstances.
• The right to data portability: Request the transfer of your data to you or a third party.

To exercise any of these rights, please contact us at support@kordra.io. We have one month to respond to your request.

4. Datensicherheit

Wir implementieren angemessene technische und organisatorische Maßnahmen, um die Sicherheit Ihrer persönlichen Informationen zu schützen. Bitte beachten Sie jedoch, dass keine Übertragungsmethode über das Internet oder elektronische Speichermethode 100% sicher ist.

9. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at support@kordra.io. You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.

ICO website: https://www.ico.org.uk

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date.