Privacy Policy

Effective Date: 22.07.2026

Your privacy is important to us. This Privacy Policy explains how DF Consult GmbH collects, uses, and protects your information when you use Chartlayers.

1. Data We Collect

We collect minimal personal data. Specifically:

Your email address when creating an account
Payment data through Paddle (we don't store this ourselves)
The content of the Excel templates you create, which is saved to our file storage so you can access it across sessions (no other workbook data is stored)

2. How We Use Your Data

To send account and invitation emails via Resend
To process payments via Paddle
To store and sync the Excel templates you create via Supabase

We do not use tracking cookies, analytics, or advertising networks.

3. Legal Basis

Your consent (e.g., when creating an account)
Fulfilling our contract with you
Legal obligations (e.g., tax law)

4. Data Retention

We retain your account data and the templates you create for as long as your account is active, and otherwise only as long as necessary for support and legal compliance.

5. Your Rights (GDPR)

If you're in the EU or UK, you may request:

Access to your data
Correction or deletion of your data
Restriction or objection to processing
Data portability

6. Data Security

We implement reasonable technical and organizational measures to secure your data.

7. Data Processors & Hosting

We rely on a small number of processors. Your data is stored within the European Union (Frankfurt, eu-central-1).

Supabase — authentication, database, and file storage, including the Excel templates you create (hosted in the EU, eu-central-1)
Paddle — payment processing (card data is handled by Paddle, not stored by us)
Resend — sending transactional emails (account and invitation emails)

8. Changes

We may update this policy. We'll notify users where required by law.