Privacy policy

The controller of your personal data is the operator of Appvelio:

We have not appointed a data protection officer. For anything about your data, write to the controller's contact address.

Beta waitlist

When you join the beta waitlist, we store your e-mail address, the language of the page, where you came from (for example a campaign name from the link), the date and version of your consent, and the date you confirmed the address. We use them to confirm the sign-up and send you the beta invitation.

Legal basis: your consent (Article 6(1)(a) GDPR).

Panel account

When you create an account, we process your name, e-mail address, password (we store only a cryptographic hash of it), account settings, the date you accepted the terms, and what you add in the panel: apps, events, tasks and team invitations. When you connect a data source, we store its API key encrypted, and the reports we fetch.

Legal basis: the contract, that is the terms of service you accept when signing up (Article 6(1)(b) GDPR). We cannot provide the service without this data.

E-mails

We send the messages the waitlist and the account need: sign-up confirmation, beta invitation, address confirmation, password reset links, team invitations and the morning readout, which you can switch off. The legal basis is consent (waitlist) or the contract (account).

Security and logs

When you sign in, we store your IP address and browser name with the session. The server logs the method and address of each request without its parameters, the response code and the time taken. The IP address of the sign-up form is checked only in the server's memory, to limit sign-ups, and is not stored.

Legal basis: our legitimate interest (Article 6(1)(f) GDPR) in protecting accounts and the service from abuse, finding errors, and establishing and defending legal claims.

The appvelio.eu site sets no cookies of its own and uses no analytics. The panel uses only essential cookies that keep your session after you sign in, and stores your chosen language in the browser.

We use no tracking or advertising cookies. Fonts are served from our own server, not from Google Fonts.

Infrastructure providers process data on our behalf, under data processing agreements and only on our instructions:

• Render (USA): hosting of the site, the panel, the API server and the database. The data is stored in the Frankfurt region, Germany.
• Cloudflare (USA), a subprocessor of Render: the CDN through which Render delivers the site and the panel. It processes your IP address on every visit.
• Resend (USA): sending e-mails through its EU region in Ireland.

When you connect App Store Connect, we contact Apple's API on your behalf. Apple processes the data of your developer account as a separate controller, under your agreement with Apple.

We disclose data to public authorities only where the law requires it. We do not sell data or share it for advertising.

Render, Cloudflare and Resend are US companies. We store the data in the EU, but these companies may access it from the US, for example for technical support.

Such transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the company takes part in it, and otherwise on standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR). Write to us for a copy of these safeguards.

• Waitlist: until you withdraw consent or the beta ends. A sign-up you don't confirm within 30 days is deleted.
• Account: as long as you have it. When you delete the account, we delete its data from the database, including API keys and fetched reports. It disappears from database backups when those backups expire in the hosting provider's cycle.
• Sign-in session data: at most until the account is deleted. Signing out ends the session.
• Server logs: for a short period set by the hosting provider, after which they are deleted automatically.
• Where data is needed to establish or defend legal claims, we may keep it until the limitation period ends.

You have the right to:

• access your data and get a copy of it (Article 15 GDPR),
• have it corrected (Article 16 GDPR),
• have it erased (Article 17 GDPR),
• restrict its processing (Article 18 GDPR),
• data portability for data processed on the basis of consent or the contract (Article 20 GDPR),
• object to processing based on legitimate interest (Article 21 GDPR).

To use these rights, write to the controller's contact address. We will reply within one month.

You can withdraw your consent to hear from us about the beta at any time, without giving a reason. Use the “Leave the waitlist” link on the page that the confirmation link or the invitation opens, or write to us. We will then remove your address from the list.

Withdrawing consent does not affect the lawfulness of processing before it. If you don't confirm the sign-up, we send nothing more and delete it after 30 days.

If you believe we process your data unlawfully, you can lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, or with the authority of the EU country where you live.

Giving us data is voluntary. Without an e-mail address we can't add you to the waitlist, and without account details you can't create an account. We make no decisions about you based solely on automated processing and do not profile you.

We will tell you about important changes by e-mail or in the panel before they take effect. The current version is always on this page.

Terms of service