This notice supplements our Privacy Policy with information specifically required by the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), United Kingdom, and Switzerland.
Data Controller
Maksim Kiselev
tabulaap@gmail.com
Legal Bases for Processing
| Processing Activity | Legal Basis |
|---|---|
| Account creation and management | Contract performance |
| Payment processing | Contract performance |
| Cloud sync of canvas data | Contract performance |
| Product analytics | Legitimate interests |
| Support communications | Contract performance |
| Marketing emails | Consent |
| Legal compliance | Legal obligation |
Your GDPR Rights
Under GDPR, you have the right to:
- Access (Article 15): Request a copy of all personal data we hold about you.
- Rectification (Article 16): Request correction of inaccurate personal data.
- Erasure (Article 17): Request deletion of your personal data (“right to be forgotten”).
- Restriction (Article 18): Request that we limit processing of your data in certain circumstances.
- Portability (Article 20): Receive your data in a structured, machine-readable format.
- Object (Article 21): Object to processing based on legitimate interests.
- Withdraw consent (Article 7): Where processing is based on consent, withdraw it at any time without affecting prior processing.
How to Exercise Your Rights
Email tabulaap@gmail.com with the subject line: “GDPR Request — [Right you wish to exercise]”
Include your account email address and a description of your request. We respond within 30 days. Complex requests may take up to 3 months.
International Transfers
If we transfer your data outside the EEA, we ensure appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission.
Our key processors and their transfer mechanisms:
- Supabase: SCCs
- Vercel: SCCs
- Polar: SCCs
Right to Complain
If you are unsatisfied with our response to a data request, you have the right to lodge a complaint with your local supervisory authority:
- EU: Your national Data Protection Authority
- UK: Information Commissioner's Office (ICO)
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC)