Privacy Policy / Datenschutzerklärung

1. Data Controller

OceanSphere Service Sp. z o.o., ul. Nowogrodzka 31, 00-511 Warszawa, Poland. NIP: PL7011291111.

2. Data We Collect

• Account data: email, display name, language preference
• Workspace content: messages, files, tasks, notes (stored per workspace)
• Technical data: IP address, user agent, last login timestamp
• Payment data: processed exclusively by Stripe. We store only Stripe customer/subscription IDs, not payment credentials.

3. How We Use Data

Account operation, billing, support, service improvement. We do not sell data or use it for advertising.

4. Translation Processing

Content translation is performed by Argos Translate running offline on our own servers (Hetzner, Germany). No content is sent to external translation APIs. Translated texts may be cached (texts ≤ 500 characters) across workspaces for performance, without identifying the source workspace.

5. Sub-Processors

• Hetzner Online GmbH (hosting, Germany) — Privacy Policy
• Stripe, Inc. (payment processing) — Privacy Policy, DPA
• Google LLC (email delivery via Gmail SMTP)

6. Data Retention

Account data: retained until account deletion. Workspace data: retained until workspace deletion + 30 days. Audit logs: retained for 2 years. Invoices: retained for legal retention periods (10 years in Poland).

7. Your Rights (GDPR / RODO)

Access, rectification, erasure, portability, restriction, objection. Contact: privacy@oceansphere-service.com. Right to lodge a complaint with the Polish DPA (UODO).

8. Cookies

We use essential session cookies only (authentication, CSRF protection). Stripe Checkout may set additional cookies during payment — see our Cookie Policy.

[DRAFT — to be reviewed by legal counsel before Go-Live]