Privacy policy

This privacy policy applies to the UpSpec website and the related services of the UpSpec platform at app.upspec.de.

1. Controller

The controller responsible for data processing is:

LIVCK.cloud – René Roscher (sole proprietorship)
Hauptstraße 1
25813 Schwesing
Germany
Email: support@livck.com

2. Hosting

Our website and platform are hosted on servers of Hetzner Online GmbH. We use their data centers in Germany only; all data is stored there. For sending emails (section 6) and processing payments (section 7) we use service providers in the EU.

When you visit our website, the following data is stored automatically in server log files:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the requested file
• Website from which the access was made (referrer URL)
• Browser used and, if applicable, your operating system

Processing is based on Art. 6 (1) (f) GDPR, our legitimate interest in the security and stability of our website. The log files are deleted automatically after 14 days.

3. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the address bar of your browser changing from “http://” to “https://” and by the lock symbol in your browser bar.

4. Data collection on our website

Cookies and browser storage

Our website does not set cookies. The language follows from the address of the page. If you choose a light or dark color scheme, we keep this choice in your browser’s storage (upspec-theme); it never leaves your device. This is technically necessary for the display you asked for (§ 25 (2) no. 2 TDDDG). We do not use tracking or advertising cookies.

Contact by email

If you contact us by email, your details, including the contact details you provide, are stored by us to process the request and in case of follow-up questions. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR if your request relates to the performance of a contract or is necessary to take pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling the requests addressed to us effectively (Art. 6 (1) (f) GDPR).

The data remains with us until you ask us to delete it, revoke your consent to its storage or the purpose for storing it no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.

5. No web analytics

We do not use any analytics or tracking services on this website, including Google Analytics. We serve fonts and videos ourselves; no third-party content is loaded.

6. Use of the platform (UpSpec)

When you use the UpSpec platform, we process the following data:

• Registration data (name, email address)
• Sign-in data (password only as a hash, passkeys, two-factor settings, sessions)
• Organization data (name, members, roles, teams)
• Content (pages and their versions, comments, reactions, tasks, boards, files and images)
• Log data (audit log: who changed permissions, structure or settings and when, with IP address and browser identifier; kept for two years)
• Session data (IP address and browser identifier of signed-in devices, so you can review and end your sessions)
• Conversations with the AI assistant, until you delete them
• Access tokens (only as a hash)
• Notification settings

Processing is based on the contractual relationship under Art. 6 (1) (b) GDPR. For the content an organization stores in UpSpec, we act as a processor under Art. 28 GDPR on the basis of the data processing agreement with the organization. All data is stored exclusively on servers in Germany.

The platform sets a sign-in cookie, a “remember me” cookie if you ask for it, a cookie that protects against forged requests (XSRF-TOKEN) and cookies for your chosen color scheme and the sidebar state. It keeps further display settings in your browser’s storage. All of this is technically necessary or explicitly chosen by you (§ 25 (2) no. 2 TDDDG); there is no tracking.

AI features

AI features are only active once an organization configures an AI provider. For each request we then send the necessary content – only content the asking person may see – to that provider. The organization decides which provider that is, including its own model. We do not train models on your content.

Emails

We send emails required for using the platform (for example for signing in) and notifications, for example about mentions or as a daily summary. You can turn off notifications in the settings or via the unsubscribe link in every email. We use Scaleway, and Sweego as a fallback, to send them, both with data centers in France.

7. Payment processing

Payments are processed by the payment service provider Mollie B.V., based in Amsterdam, the Netherlands. Mollie processes the data required for payment (for example credit card number, bank details). A data processing agreement under Art. 28 GDPR is in place. More information can be found in Mollie’s privacy policy: https://www.mollie.com/privacy.

8. Sub-processors

• Hetzner Online GmbH: hosting of website and platform, Germany
• Scaleway, Sweego as a fallback: sending emails, France
• Mollie B.V.: payment processing, the Netherlands

9. Your rights

You have the following rights regarding the personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise your rights, you can contact us at support@livck.com.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you infringes the GDPR.

Competent supervisory authority:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel, Germany

11. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always meets current legal requirements or to reflect changes to our services. The new privacy policy then applies to your next visit.