Privacy Policy

Effective date: October 13, 2026

1. Who we are

Since Labs is the data controller for personal data processed through Since HQ. Contact: privacy@example.com. EU/EEA users can reach our privacy team in English at any time.

2. What we process and why

Account data (name, email, password hash): to create and secure your account. Legal basis: contract performance. Passwords are stored only as salted hashes.

Workspace content (tasks, messages, files, agent configurations): to provide the service you asked for. Legal basis: contract performance.

Consent records (what you accepted and when): to demonstrate valid consent. Legal basis: legal obligation (GDPR Art. 7(1)).

Security audit log (sign-ins, permission changes, exports, erasures): to detect abuse and satisfy accountability requirements. Legal basis: legitimate interest in security. Access is restricted; entries are never edited after the fact.

3. Your rights

You can access, correct, export, and delete your personal data. Workspace owners can request a machine-readable export of all workspace content from workspace settings. You can request erasure of your account; we fulfil verified erasure requests within 30 days and keep only the minimal audit record that erasure happened. You may also lodge a complaint with your local supervisory authority.

4. Sharing

We do not sell personal data. We share it only with processors that host and operate the service under data processing agreements, and where law compels us.

5. Retention

Account and workspace data are kept while your workspace is active. After closure, content is deleted within 30 days; the security audit log and consent records are kept only as long as legally required, then deleted.

6. International transfers

Where data is processed outside the EEA, transfers rely on the EU Standard Contractual Clauses plus supplementary measures.