Privacy Policy

Last updated: October 7, 2025

1. Introduction

We at Taras Frank Holding UG (haftungsbeschränkt) ("we", "our", "us") respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our Vela Board service.

2. Data We Collect

2.1 Account Information

• Email address (required for account creation)
• Account preferences and settings
• Profile information you choose to provide

2.2 Whiteboard Content

• Cards, notes, and other content you create
• Board layouts and organization
• File attachments and images you upload

2.3 Technical Information

• IP address and browser information
• Device type and operating system
• Usage patterns and performance data

3. How We Use Your Data

3.1 Service Provision

• To provide and maintain the Vela Board service
• To save and sync your whiteboard data across devices
• To authenticate your account and ensure security

3.2 Communication

• To send important service updates and notifications
• To respond to your support requests
• To inform you about new features (with your consent)

3.3 Improvement

• To analyze usage patterns and improve our service
• To debug issues and ensure service reliability
• To develop new features based on user needs

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices. We use Supabase as our data provider, which provides enterprise-grade security and compliance. Your whiteboard content is encrypted both in transit and at rest.

5. Data Sharing

We do not sell, trade, or otherwise transfer your personal data to third parties. We may share data only in the following circumstances:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and safety
• With service providers who assist in operating our service (under strict confidentiality agreements)

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain types of data processing

7. Data Retention

We retain your personal data only as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal reasons.

8. International Transfers

Your data may be transferred and stored in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through our service. Your continued use of the service after such changes constitutes acceptance of the updated policy.

10. Contact Information

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at: