Privacy Notice

Controller

The controller is Melvin Erk, Cothmannstraße 5-7/22, 1120 Vienna, Austria, contact@kaiserbyte.com (see the Imprint). The free tier requires no account and involves only strictly necessary cookies and short-lived logs; the data below concerns mainly the paid subscriber account.

What we process, why, and on what basis

• Account & contract data (your email; optional display name; your self-declared EU/EEA country of residence): to create and operate your account, send passwordless sign-in emails, and provide the paid service — Art. 6(1)(b) GDPR.
• Country of residence & billing records: to determine and document the correct tax treatment and meet our tax and accounting obligations — Art. 6(1)(c).
• Consent timestamps: to record your acceptance of our terms and this notice — Art. 6(1)(c)/(b).
• Subscription data mirrored from our payment provider (status, plan, current period): to manage your subscription — Art. 6(1)(b).
• Short-lived server logs containing a salted, hashed form of your IP address and technical request data: to keep the service secure, stable and abuse-free — Art. 6(1)(f).

The content of your sessions — audio, any video and text chat — is transmitted directly between participants (peer-to-peer, encrypted). We do not record, store or access it.

Cookies

We use only strictly necessary cookies: a session cookie to keep you signed in and a security (CSRF-protection) cookie. They are essential to provide the service and are not used for analytics, tracking or advertising.

Recipients

We share data only with providers that help us run the service: our payment provider (Stripe — it hosts the checkout and customer portal; we never receive or store your card details); our hosting provider; our email server; and our media-relay server, which only forwards already-encrypted media when a direct connection fails and stores nothing. Our hosting, email and relay run in the EU. Payment processing by Stripe may involve a transfer of data to the United States; Stripe is certified under the EU–U.S. Data Privacy Framework and additionally relies on the EU Standard Contractual Clauses.

Retention

Where we are legally required to retain data — in particular billing and accounting records — we keep it for the statutory retention period under Austrian tax and commercial law (currently seven years), calculated from the end of the calendar year to which the records relate; this may be extended where records are relevant to pending proceedings. Other personal data is deleted once it is no longer needed for its purpose or when you delete your account, unless a legal retention obligation applies.

Your rights

You have the right to access, rectification, erasure, restriction and data portability, and to object to processing based on our legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting prior processing. You can delete your account at any time from your account page. To exercise any right, contact contact@kaiserbyte.com.

Complaints

You may lodge a complaint with the Austrian Data Protection Authority, dsb@dsb.gv.at.

Is provision required?

Providing your email is necessary to create an account; without it we cannot offer the paid service. Providing your country of residence is required for tax purposes.