packages/super-sync-server/templates/privacy.template.html
With this Privacy Policy, we inform you about the type, scope, and purpose of the processing of personal data ("Data") within the scope of using the service Super Productivity Sync. This policy also explains your rights under the General Data Protection Regulation (GDPR).
{{ PRIVACY_CONTACT_NAME }}
{{ PRIVACY_ADDRESS_STREET }}
{{ PRIVACY_ADDRESS_CITY }}
{{ PRIVACY_ADDRESS_COUNTRY }}
Email: {{ PRIVACY_CONTACT_EMAIL }}
A Data Protection Officer has not been appointed as the statutory requirements for this are not met (fewer than 20 persons constantly involved in data processing).
This includes all data you save in the "Super Productivity" app and synchronize via the Service:
Note: If End-to-End Encryption (E2EE) is activated, this data exists on our server exclusively in encrypted form.
Technically necessary when accessing the server:
We process your data based on the following legal bases:
This applies to tax retention obligations for paid plans or official requests for information.
The Service is hosted by:
{{ PRIVACY_HOSTING_PROVIDER }}
Where this provider processes personal data on the controller's behalf, Art. 28 GDPR requires a Data Processing Agreement between them. Details of that arrangement, and of the location of processing, are available on request from the controller named in Section 2.
Details of the infrastructure on which the Service runs — including any third-party hosting provider, the location of processing, and the corresponding Data Processing Agreement under Art. 28 GDPR — are available on request from the controller named in Section 2.
If you enable E2EE in the app:
We send exclusively transactional emails (e.g., password reset, email address confirmation, security-relevant system messages). Data processing is carried out based on Art. 6(1)(b) GDPR (Performance of Contract).
Service Provider: Emails are dispatched via the mail infrastructure configured by the controller named in Section 2. No email marketing providers are used, and no email address is passed on for advertising purposes.
If you delete your account via the app settings, we will delete your inventory data and content data immediately, but no later than within 7 days from all active systems.
We reserve the right to delete free accounts that have not been used for more than 12 months. This will only occur after prior notification to the registered email address.
Log data (IP addresses) are automatically deleted after 7 to 14 days , unless security-relevant incidents require longer storage.
Where the Service is offered against payment, invoice-relevant data is retained for as long as statutory retention obligations require (in Germany, up to 10 years ). If no paid plan is offered, no such data arises.
Data is generally not transferred to third parties unless:
We never sell your data to third parties or advertisers.
Under the GDPR, you have the following rights at any time:
To exercise your rights (e.g., deletion), a simple email is sufficient: {{ PRIVACY_CONTACT_EMAIL }}
You have the right to lodge a complaint with a data protection supervisory authority — in particular in the Member State of your habitual residence or place of work, or of the establishment of the controller named in Section 2.
The authority responsible for the controller is:
{{ PRIVACY_SUPERVISORY_AUTHORITY }}
The SuperSync service uses only technically necessary session cookies for authentication. We do not use tracking cookies, analytics services, or advertising technologies.
We do not use automated decision-making or profiling as defined by Art. 22 GDPR.
If you have any questions about data protection, please contact us:
Email: {{ PRIVACY_CONTACT_EMAIL }}