Who is responsible

Studio Oplos VOF, operating as Condui, is the controller for personal data needed to provide Condui. Registered office: Karel De Goedelaan 25, 8870 Izegem, Belgium. VAT and company number: BE1038620471. For privacy questions, contact us at support@condui.be.

Data we process

Depending on how you use Condui, we process account details, login and authentication metadata, billing data, payment statuses, project files and related files (including optional logo and signature images), project metadata, shared project links, support messages, crash and diagnostic data, preferences, email preferences and limited analytics.

Local projects and cloud projects

Projects kept only locally remain on your device or in browser storage, unless you export, share, import, ask for support or use a cloud feature. Cloud projects, shared links, version history, comments and related files are processed to provide those online features. A signature image in your cloud profile is kept in private storage. It is visible in a PDF only when the export option is enabled. Recipients of that PDF can copy the visible image.

Why we use data

• to provide the app, websites, accounts, cloud projects, exports, QR links and support;
• to manage identity, sessions, access rights, security and abuse prevention;
• to process payments, subscriptions, invoices, tax obligations and administration;
• to investigate errors, crashes, sync problems and support requests;
• to improve product quality, performance and usability with limited analytics where you can give consent when required;
• to comply with legal obligations and protect our rights or users' rights.

Legal bases

We process data where necessary to perform our agreement, comply with legal obligations, pursue our legitimate interest in security, support and product improvement, or based on your consent where consent is required.

Service providers

We do not sell personal data or project data. Depending on the features you use, we rely on the following service providers. Their own privacy notices explain how they process data:

• Google Analytics for limited usage statistics, only after you have given consent;
• Netlify for hosting, delivering and securing our websites and online services;
• Supabase for databases, authentication, file storage and cloud projects;
• Resend for transactional email and, where you sign up for it, product communications;
• Stripe for payments and subscriptions;
• Billit for invoicing and accounting processing.

Anonymous and aggregated data

We may anonymise or aggregate project data for statistics, research, quality control, security and product development. We treat data as anonymous only when it can no longer reasonably be linked to you, your account, a customer, an address or an installation. Data that is merely pseudonymised or otherwise still linkable remains personal data and is covered by this privacy declaration.

Retention

We do not keep personal data longer than necessary. Account and project data are generally kept while your account or project is active. Billing and accounting data are retained for as long as the law requires. Support, diagnostic and analytics data are kept only as long as needed for follow-up, security and product improvement.

Security

We take reasonable technical and organisational measures to protect data, including access control, encrypted connections, limited service access and operational logging. No system is risk-free, so report suspected security issues via support@condui.be.

Your rights

Within legal limits, you can request access, correction, deletion, restriction, objection or portability for your personal data. You can withdraw consent without affecting earlier processing. You also have the right to lodge a complaint with the Belgian Data Protection Authority.

Changes

We may update this declaration when Condui, our legal details or our processing changes. The date and content on this page determine which version applies.