Privacy Policy

Last updated on 2024/12/20

In order to sign up and use our service you'll need to provide limited information. We only use this information to provide access to the service and to improve user experience.

Information We Get When You Use Our Services

When you use our platform, we collect information about which of the services you've used and how you've used them.
The types of information we collect when you use our platform:
  • Usage Information. We collect information about your activity on our platform. For example, we may collect information about:
    • how you interact with the platform;
    • how you interact with content by other users, such as their usernames, what content of theirs you've seen.
  • Content Information. We collect content you create on our platform and information about the content you create or provide, such as if other users have viewed the content. This includes media files (e.g. photos, videos, and others).
  • Log Information. We collect log information when you use our website, such as:
    • details about how you've used our services;
    • access times;
    • pages viewed;
    • errors you observed;
Practices regarding non-personal information:
  • Technical data. In order to maintain the integrity of our systems and to monitor and improve their performance we collect technical information typically collected by websites and apps: operating system, browser type, dates and times logged in, etc.

Age Restrictions

Our platform is intended for users aged 16 and older. By using our services, you confirm that you meet this requirement. We may suspend or terminate accounts that violate this policy.

Practices regarding personal information

Information practices:
  • Personal information:
    • We collect personal information of our users: email address.
    • We collect personal information about our users only from our users, and not from any other sources.
    • We do not share, sell, or disclose personal information about our users to anyone. Exceptions:
      • The email provider we use to send you emails.
    • We collect personal information to enable our platform to function.
  • Sensitive personal information: We don't ask for such information from our users.
  • Information you disclose: Whatever information you make available by disclosing it to other users - by designating it as viewable only by you, or to visibility levels with users assigned / portals created for them - is not personal information. We do not analyze, data-mine, sell, or otherwise use the information you share as part of your “profile information.”
Metadata management:
  • Before uploading media files, you may choose to remove metadata using external tools. If you upload media with metadata, it will be preserved by default. You acknowledge the potential risks of sharing files with sensitive metadata, such as geolocation.
  • Photo metadata, such as geolocation, is not shared with viewers unless you enable the download of photos in "original quality" (disabled by default).
  • Non-photo media is displayed in its original quality. This media is not processed by the platform, the metadata will be available to anyone who downloads the file.
  • Third-Party services:
  • We may use third-party services, such as cloud storage providers and payment processors, to deliver our services. These providers comply with GDPR or other relevant laws to ensure your data is handled securely.
  • Legal Basis for Processing Personal Data

    We process your personal data based on the following legal bases:
  • Consent: For optional features like media uploads.
  • Contract: To provide the services you signed up for.
  • Legal Obligation: To comply with applicable laws, such as retaining transaction data for tax purposes.
  • Your rights

    You have the right to:
  • Obtain from us the specific pieces of personal information we have about you.
  • Correct inaccurate personal information we have about you.
  • Delete the personal information we have about you.
  • Delete all data connected to your account.
  • Breach Notification
  • In the unlikely event of a data breach that affects your personal data, we will notify you and the relevant supervisory authority within 72 hours, as required by GDPR.
  • If you exercise these rights there won't be any adverse consequences from us.
    To exercise these rights, email us at [email protected] stating your request.

    Data retention period

    You have the right to ask us at any time to delete (permanently) all data connected to your account.

    Without your request for removal:
    • With a free trial account:
      • Your account is downgraded to read-only after your trial expires.
      • You have 14 days to upgrade to a paid plan. Unless you upgrade to a paid plan, the data will be deleted (permanently) once that period elapses.
      • Account will be deleted (permanently) after 60 days of no activity.
    • With a paid account:
      • Your data is kept during your paying period.
      • Your account is downgraded to read-only once your payments stop.
      • Your data will be kept for 30 days without payments. Unless you upgrade to a paid plan, the data will be deleted (permanently) once that period elapses.
      • You can email us to ask for an extension of this period.
      • Account will be deleted (permanently) after 60 days of no activity.
      • Your username will be freed up and available for other users shortly afterwards.
    Activity is defined as logging in to your account, making a payment, uploading media, or interacting with the platform in any way.
    Your delete requests (as requested via application UI, automatically, or email) will be executed with a delay:
    • Media files are permanently deleted within 24 hours.
    • Other data is permanently deleted in around 14 days. Your data is deleted permanently within 24 hours from our primary data storage. We keep encrypted backups of data for 14 days. It will take around 14 days for your data to be permanently deleted from our platform.
      • Data stored in backups during this period is encrypted and inaccessible for regular use.
    Payment transaction records are not considered "your data" for the purposes of data deletion. We are required by law to keep payment transaction records long after your account is deleted.

    Governing Law and Jurisdiction

    Ongoing Things UG (haftungsbeschränkt) operates under German laws. By using our platform, you agree that any disputes or claims arising out of or relating to this Privacy Policy, or your use of the platform, shall be governed exclusively by German law.

    You also agree that any legal proceedings shall be brought exclusively in the courts of Berlin, Germany.

    Notice for International Users

    Ongoing Things UG (haftungsbeschränkt) is based in Germany. By using our services, you agree that your data may be transferred to, processed, and stored in Germany and other countries where we operate.

    We comply with the European Union's GDPR regulations and ensure adequate safeguards for international data transfers. Users outside the EU must understand that their local privacy laws may differ.

    If you have questions about your data, please contact us at [email protected]

    Updates to Privacy Policy

    We may update this Privacy Policy from time to time. Significant changes will be communicated via email or within the platform prior to taking effect.