Privacy Policy

Forvion UG (haftungsbeschränkt) Schweppermannpark 4 84539 Ampfing Germany

Email: Kontakt@forvion.eu

We process personal data only to the extent necessary to provide a functioning application.

Using LogikProject requires creating a user account. During registration, we collect your email address and an encrypted password. If you sign in via a third-party provider (e.g. Google), we receive the identity information provided by that service (name, email address).

Your project data (diagrams, notes, Kanban cards, and other content) is stored via our infrastructure provider Supabase within the European Union. Supabase processes this data on our behalf as a data processor under Article 28 GDPR; a corresponding Data Processing Agreement (DPA) is in place.

You can view, export, or delete your account data and all stored project data at any time via your account settings. After account deletion, your data is removed from our active systems immediately. For technical reasons, data may persist for a limited period in automated backups before those backups are routinely overwritten; these backups are not separately accessed. Legal retention obligations (e.g. commercial or tax law retention requirements for billing data, see Section 5) remain unaffected by this.

If you use AI features (the LogikAI chat assistant or the AI Future State Generator), diagram data (process steps, cycle times, KPI values) is transmitted to an AI provider for processing. You can choose which provider is used in Settings:

Anthropic (USA, default provider) — processes data according to its own privacy policy: anthropic.com

Mistral AI (France, EU provider) — data is processed exclusively in European data centers and never leaves the EU. Privacy policy: legal.mistral.ai

In both cases, no personal data is transmitted — only diagram and process content.

If you provide your own API key ("Bring Your Own Key"), the request is sent directly from your browser to the chosen provider. In this case, Forvion has no access to the transmitted data and does not act as a data processor. If you use the access provided by Forvion instead, Forvion acts as a data processor under the GDPR for the selected AI processing (Anthropic or Mistral AI); a corresponding Data Processing Agreement (DPA) is in place with both providers.

Use of the AI features is optional.

The application is hosted on the Vercel platform. The server location is Europe (Frankfurt/Amsterdam). Vercel may log technical access data (IP address, timestamp, URLs accessed). More information: vercel.com

For user accounts and project data storage, we use Supabase, with servers located in the European Union. Supabase processes your account data and project content on our behalf as a data processor under Article 28 GDPR. More information: supabase.com

For payment processing, we use Paddle.com Market Limited, company no. 8172165, registered office: Judd House, 18-29 Mora Street, London, EC1V 8BT, United Kingdom ("Paddle") as our Merchant of Record. When you purchase a paid plan, you enter into the purchase agreement directly with Paddle, not with Forvion. Paddle processes payment and billing data (name, billing address, payment method) as an independent controller under the GDPR, since Paddle bills and issues invoices in its own name as Merchant of Record. More information: paddle.com

For the operation of the application, your login, and payment processing, we use only technically necessary cookies:

• Vercel may set technically necessary cookies for routing.
• Supabase sets a necessary session cookie to keep you logged in during your visit.
• During checkout, our payment provider Paddle sets technically necessary cookies for fraud prevention and to correctly display pricing and currency.

These cookies are required for the application to function or to complete a purchase, and under German law (§ 25 para. 2 TTDSG) do not require separate consent. No tracking or advertising cookies are used.

We do not use analytics tools, tracking pixels, or advertising services. No usage tracking takes place.

You have the right to access, rectification, erasure, restriction of processing, and data portability. Most of these rights can be exercised directly via your account settings (data export, account deletion). For further requests, please contact: Kontakt@forvion.eu

For rights regarding your payment and billing data held by Paddle, please contact Paddle directly, as Paddle acts as an independent controller for this data: paddle.com

This policy reflects the current state of the application. In the event of material changes, this page will be updated.