Privacy Policy

Last updated: 2026-03-01

Data Controller

LECAP UG (haftungsbeschränkt)

Stargarder Straße 35, c/o Loic Pinel

10437 Berlin, Germany

Data Processing Overview

Purpose	Data Collected	Legal Basis	Retention Period
Core	Email address, Full name, Company name, IP address	Art. 6(1)(b) GDPR — Contract performance	Duration of account + 30 days
Supabase Auth	Email address, Authentication tokens, Login timestamps	Art. 6(1)(b) GDPR — Contract performance	Duration of account
Analytics	Page views, Click events, Device info, Anonymized IP	Art. 6(1)(f) GDPR — Legitimate interest	12 months
Call Recording	Discovery-call audio (operator microphone, plus the call's audio when shared), Call transcripts, Name of the other participant, as entered by the operator for the consent record	Art. 6(1)(a) GDPR — Consent	Duration of project + 90 days, or on request
Training Capture	Course answers describing the participant's own business process, Names of colleagues, roles and systems mentioned in those answers, Authorship (which account wrote and published each answer)	Art. 6(1)(b) GDPR — Contract performance	Private drafts: deleted with the account. Published briefs: kept as a project record for the duration of the project, with authorship detached on account deletion.

Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact us at [email protected].

Third-Party Processors

Processor	Purpose	Location
Supabase	Authentication & Database	EU (Frankfurt)
Vercel	Hosting & CDN	Global (EU-primary)

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.