Privacy Policy

1. Controller

The data controller is SFF S26 AG, Schützengasse 7, 9000 St. Gallen, Switzerland. Privacy contact: studio@sff.vc.

2. What we collect

• Account data: name, email, and (for Google sign-in) your Google profile name, email, profile picture and account identifier.
• Profile data: your membership group (team / ecosystem / public), role, your marketing-updates preference, and the date you accepted these terms.
• Content & activity: your votes, comments, and deal redemptions.
• Technical data: IP address, device/browser information and log data, used for security and to operate the Service.

3. Why we use it (and legal bases)

• To provide the Service — create and run your account, show rankings, comments and deals. Legal basis: performance of a contract.
• To send SFF Studio updates — only if you opt in. Legal basis: consent (withdraw any time).
• To facilitate partner deals — show the deal for your group and record redemptions so partners can see uptake. Legal basis: contract / legitimate interest.
• Security, abuse prevention and improving the Service. Legal basis: legitimate interest.

4. Cookies

We use only essential cookies required to keep you signed in (set by our authentication provider). We do not use advertising or third-party tracking cookies. (If you later add analytics, update this section and add a consent banner.)

5. Who we share it with (processors)

We use trusted service providers who process data on our behalf under data-processing agreements:

• Supabase — database and authentication (hosting region: EU).
• Google — Google sign-in (OAuth) when you choose it.
• Lovable — application hosting.
• Customer.io — email delivery, only if you opt in to updates.

We do not sell your personal data. Tool logos are loaded from third-party logo services using only the tool's public domain — no personal data is shared.

6. International transfers

Where data is processed outside Switzerland/the EEA (e.g. by a US-based provider), we rely on appropriate safeguards such as EU Standard Contractual Clauses and equivalent Swiss mechanisms.

7. Retention

We keep account data while your account is active and for a reasonable period afterwards, then delete or anonymise it. You can ask us to delete your account at any time (see your rights below).

8. Your rights

Under Swiss FADP and EU GDPR you may request access, correction, deletion, restriction, portability, and object to certain processing; and withdraw consent (e.g. unsubscribe from updates) at any time without affecting prior processing. To exercise these, contact studio@sff.vc. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU supervisory authority.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

10. Changes

We may update this Policy; material changes will be notified via the Service or email. The "last updated" date reflects the latest version.

11. Contact

studio@sff.vc