Privacy policy

This is an English translation for convenience. The German version is authoritative.

1. Controller

The controller under the GDPR is: Eray Yilmaz, Chingvoice, Europaring 90, 53757 Sankt Augustin, Germany – email:info@chingvoice.com

2. Overview

We process personal data only as far as necessary to provide our website and software, to perform contracts, to meet legal obligations or on the basis of legitimate interests (Art. 6(1)(b), (c), (f) GDPR) or consent (Art. 6(1)(a) GDPR). The website uses no analytics or tracking toolsand no advertising cookies. Fonts are served locally; no connection to Google Fonts is made.

3. Website hosting – Netlify

The website and the software's web interface are hosted by Netlify, Inc., San Francisco, USA. Netlify processes technically necessary data (e.g. IP address, time of access, page requested, browser information) in server logs to deliver the website and keep it secure (Art. 6(1)(f) GDPR). A data processing agreement is in place; transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses.

4. Accounts and use of the software – Supabase

For user accounts, login and data storage we use Supabase (Supabase, Inc., USA). Data is stored in a data centre in theEU (Frankfurt am Main). This includes account data (email, hashed password, login times), company data (name, address, tax number/VAT ID, bank details, logo) and business data you enter (customers, products, quotes, invoices, payments, expenses and uploaded receipts). Legal basis: Art. 6(1)(b) GDPR. A data processing agreement is in place; where third-country access cannot be ruled out, standard contractual clauses apply.

5. Sending email – Resend

For system emails (e.g. sign-up confirmation, password reset) and documents you send to your clients from Chingvoice (e.g. invoices, reminders), we useResend (Resend, Inc., USA). Recipient, sender, subject, content, attachments and technical delivery data are processed (Art. 6(1)(b) GDPR). A data processing agreement is in place; transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses.

6. Payments – Stripe

Payments for paid plans are processed by Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland), which processes the data required for payment (e.g. name, email, payment method, billing address, amount). We do not receive full card details. Legal basis: Art. 6(1)(b) and (c) GDPR. Stripe may transfer data to the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses. More:stripe.com/privacy.

7. Contact by email

If you email us, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR).

8. Cookies and local storage

The website uses no tracking cookies. The software stores technically necessary information (e.g. login tokens and settings) in your browser's local storage. This is strictly necessary to provide the service you requested (§ 25(2) no. 2 TDDDG) and does not require consent.

9. Your clients' data – data processing

Where you process personal data of your clients or business partners in Chingvoice, you are the controller and we act as processor. We provide a data processing agreement under Art. 28 GDPR.

10. Retention

We store personal data as long as necessary for the purposes stated. After your account is closed we delete your data unless statutory retention obligations apply; such data is restricted and deleted once the periods expire. You are responsible for retaining your own business records and should export them before deleting your account.

11. Security

Data is transferred encrypted (TLS). We take appropriate technical and organisational measures to protect your data.

12. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) and may withdraw consent at any time with future effect. Contact info@chingvoice.com. You may also lodge a complaint with a supervisory authority, e.g. the data protection commissioner of North Rhine-Westphalia.

13. Changes

We update this policy when our services or the law change. The version published on this page applies.