Privacy Policy

1. Data we process

RekcuzPortal processes account data such as display name, username, email address, password hash, verification status, role assignments, permissions, invite data, and accepted terms. During project work, we also process tasks, subtasks, comments, reactions, assignments, due dates, progress, board settings, and recorded contribution events. Contact requests and the technical security and server data required to operate, secure, and troubleshoot the portal may also be processed.

2. Purposes, legal bases, and storage

We process personal data to provide the portal, protect accounts, manage invitations and permissions, maintain content, answer enquiries, and send required transactional emails. Depending on the processing activity, we rely on performance of the service, legal obligations, legitimate interests in security and reliable operations, or your consent. Data may be stored in the application database, server and security logs, and the email or hosting systems configured to operate the service.

3. Cookies

RekcuzPortal uses required cookies for login, security, antiforgery protection, and related account functions; these are necessary for protected project access. These cookies do not contain task text, comments, or board content, but they may associate your session with your signed-in account. Sign out when using a shared device. Optional analytics cookies are set only after you consent. The consent cookie <code>{consentCookieName}</code> stores your choice for about 180 days. If you opt in, the session cookie <code>{sessionCookieName}</code> may recognise repeat visits for up to 30 days. You can change your choice at any time through Cookie settings; your cookie choice does not change project permissions, shared board settings, or theme values. Board and theme settings are stored server-side and are not used as cookie preferences. We do not use advertising cookies, social tracking pixels, or cross-site profiling.

4. Recipients, disclosure, and transfers

We do not sell personal data. Personal data is disclosed only to recipients needed for hosting, database operations, email delivery, security, or legal compliance. If providers outside your country or outside the EEA are used, transfers should take place only with appropriate safeguards such as contractual protections.

5. Retention and data subject rights

Account data is generally retained while your access remains active and afterwards only as needed for security, unresolved matters, or legal retention duties. Contact requests and related emails are kept for handling the enquiry and limited follow-up. Analytics and security data are retained only for limited periods needed to operate the service. Subject to applicable law, you may request access, correction, deletion, restriction, portability, objection, and withdrawal of consent. You may also complain to a competent supervisory authority.

6. Contact

Privacy and deletion requests can be sent to contact@rekcuz-products.net or to the postal address listed in the imprint.