Privacy Notice

1. Controller

MS Software
Marcel Steiner
Hügelweg 1
9400 Wolfsberg, Österreich
Email: office@faellig.net

2. What data we process

Depending on how you use Fällig, we process account and authentication data (in particular email address and account identifiers), profile settings such as language and time zone, reminders you create (for example title, category, due date, notification time, notes and optional amount), subscription and payment status, support/feedback content, withdrawal declarations and technical security/connection data.

Passwords are handled through our authentication provider and are not stored by us in plain text. Payment card details are entered with the payment provider and are not stored in the Fällig database.

3. Purposes and legal bases

Account creation, authentication, reminders, transactional emails and Pro features are processed to perform the contract or take pre-contractual steps (Art. 6(1)(b) GDPR). Payment/accounting records required by law are processed to comply with legal obligations (Art. 6(1)(c) GDPR). Withdrawal declarations are processed to comply with legal obligations and to handle the contract (Art. 6(1)(c) and (b) GDPR). Security logs, abuse prevention, error analysis and support improvement may be processed on the basis of our legitimate interests in operating a secure and reliable service (Art. 6(1)(f) GDPR).

4. Service providers and recipients

We currently use Cloudflare for hosting, network delivery and security; Supabase for database and authentication; Resend for transactional email; and Stripe for payment and subscription processing. These providers receive only the data required for their respective services and may use sub-processors.

5. International transfers

Some providers or their sub-processors may process data outside the European Economic Area. Where required, transfers are based on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses. Further information can be obtained from us using the contact details above.

6. Storage

Account and reminder data are generally stored while the account is active and are deleted when the account is deleted, unless continued storage is required by law or necessary for the establishment, exercise or defence of legal claims. Tax-relevant accounting records are retained for the statutory retention period, generally seven years in Austria. Feedback and support messages are generally retained for 12 months after the respective request has been completed, unless longer retention is required for legal claims or by law. Technical security logs are retained only for as long as reasonably necessary for security and troubleshooting, subject to provider settings and legal requirements.

7. Cookies, local storage and AdSense preparation

Fällig uses technically necessary session mechanisms and local browser storage needed for login, security and interface preferences such as the selected theme. During the Google AdSense site-review phase, the AdSense site code may be loaded for ownership verification and technical review even though Fällig does not yet render advertising units. This can establish a technical connection to Google. Visible advertising in the Free plan will only be activated after the required consent-management setup has been completed. When advertising is activated, Google AdSense may process browser/device information, IP-related information, ad interactions and, depending on region and consent choice, cookies or similar storage technologies for advertising purposes. Pro accounts are designed not to render Fällig advertising units. External payment pages may use their own technically necessary mechanisms under the payment provider's privacy information.

8. Your rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction, objection and data portability, as well as the right to withdraw consent where processing is based on consent. You may also lodge a complaint with a supervisory authority. In Austria, the competent authority is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria.

9. Account deletion

You can request deletion using the account function in Fällig. Data that must be retained due to mandatory accounting, tax or legal requirements will be restricted to those purposes until the retention period expires.

10. Changes

We update this notice when our processing activities or legal requirements change. The current version is published on this page.