Who we are
AZALI SPOLKA Z OGRANICZONA ODPOWIEDZIALNOSCIA, ul. Sw. Waclawa 23/10, 26-610 Radom, Poland, KRS 0001130742, NIP 8982312678, REGON 52984633900000 is the operator of azali.io and the publisher of applications under the Azali brand, including Splot.
You can contact us about privacy at hello@azali.io.
Scope
This policy covers the azali.io website, our web applications, mobile applications, support channels and related services.
It is written to cover private users, shared projects and organization projects. Splot is designed around Projects as the primary unit of work.
Roles under GDPR
For account data, support requests, website usage and direct communication with individual users, Azali usually acts as a data controller.
For organization projects where a business customer decides why and how personal data is processed, Azali may act as a processor under a Data Processing Addendum.
Data we process
Account data: name, email address, organization, authentication and settings data.
Private project data: tasks, notes, dates, files, reminders, comments and project settings created by the user.
Shared and organization project data: tasks, messages, mentions, reactions, attachments, roles, permissions, project metadata and activity needed to provide the service.
Technical data: device, browser, IP address, logs, crash data, push notification tokens and security events.
Support and contact data: messages sent to Azali, email metadata and related correspondence.
Why we process data
To provide the service, maintain accounts, sync projects, deliver notifications, secure the product, answer support requests and comply with legal obligations.
Where required, we rely on consent. Otherwise, processing may be necessary for contract performance, legal compliance or legitimate interests such as security and abuse prevention.
Private projects and organizations
Joining an organization does not give that organization access to a user's private projects.
Organization administrators can manage organization projects, members, permissions, security settings and exports only within their authorized organization scope.
Retention
We keep account and project data for as long as needed to provide the service, meet legal requirements, resolve disputes and maintain security.
If an account, private project or organization project is deleted, related data is removed or anonymized according to the service settings, backup cycles and legal obligations.
Subprocessors and transfers
We use subprocessors only where needed to provide hosting, storage, email, monitoring, payments or similar operational services.
The current public subprocessor list is available at /subprocessors. Where data is transferred outside the EEA, we use appropriate safeguards required by law.
Your rights
Depending on your location and role, you may request access, correction, deletion, restriction, portability or objection to processing.
Users in the EEA may also lodge a complaint with a supervisory authority. Contact us at hello@azali.io to exercise your rights.
Children
Our services are not directed to children. If we learn that we have collected data from a child without proper authorization, we will take appropriate steps to remove it.
This page is a production-oriented legal draft for Azali public services and should be reviewed by legal counsel before regulated or paid customer use.