Privacy Policy
Last updated: May 24, 2026.
1. Data controller
The data controller is Vitalii Shtybin. Privacy contact: support@georoots.app.
2. What we collect
Account (email, display name, password hash); content (texts, GEDCOM, photos, persons, events, places); payment data is processed by Paddle, we do not store cards; technical data (IP, User-Agent, logs); chat messages with the admin.
3. Legal basis
Contract performance, legitimate interest (security), consent (optional features), legal compliance.
4. Sharing
Paddle.com Market Limited — Merchant of Record; Supabase — DB and file hosting (EU); Lovable Cloud / Cloudflare Workers — app hosting; OpenAI / Google AI — text processing during AI import.
5. Retention
Account data — while the account is active; payment history — 7 years; technical logs — 90 days.
6. Your rights
Under GDPR: access, rectification, erasure, restriction, portability, objection. Requests to support@georoots.app.
7. Cookies
We use technically necessary cookies for authentication. No third-party analytics cookies.
8. Transfers outside the EU
Some providers may process data outside the EEA. Standard Contractual Clauses (SCC) apply where required.
9. Changes
We notify of material changes by email or in the app.