Who handles your data — and how.

If we process personal data on your behalf, a data processing agreement with technical and organisational measures applies. A separate NDA on request.

You invite our account into your systems — repository, shop, workflow tool or folder. We don't receive or store passwords, API keys or tokens from you; keys for your applications stay in your systems, for example in repository secrets, n8n credentials or environment variables. You can revoke the invitation yourself at any time.

We work on a separate branch with a pull request, on staging, in a copy of your theme or in an inactive workflow. You check and publish what goes live yourself.

Repositories stay with your provider and in the region you chose — GitHub, GitLab, Bitbucket, Azure DevOps or your own server. Where that is, is your choice; we deliver back there.

Your workspace's project description, cards, messages and attachments are hosted at Render in Frankfurt am Main (EU), encrypted in transit and at rest. To prepare tasks, Claude (Anthropic Ireland) processes a card's content and the context of your workspace; Anthropic processes and stores this data in the USA, based on the EU Standard Contractual Clauses, and does not use it to train AI models.

A senior developer checks and releases every delivery before it reaches you.

We delete a task's attachments 30 days after it was accepted, declined or archived. We delete a workspace with everything in it once your Abo has ended more than 12 months ago and nothing has changed for 12 months — if no Abo ever ran, 12 months after the last change. Earlier on request, once no Abo is running. Statutory retention duties, for example for invoices, remain unaffected; all periods are listed in the privacy policy.

Your contractual partner, and the one liable, is techmg GmbH alone. We only use sub-processors that are named in the list attached to the DPA.