Very Simple Projects is built in the EU and hosts your data in the EU. This page
summarises how we handle the GDPR. It is an honest description of the service,
not legal advice.
Controller
Portfoliobox Stockholm AB (org. no. 556894-4382), Rånövägen 30, 168 39 Bromma, Sweden, provides Very Simple
Projects and is the data controller for your account, projects, tickets and
comments. Contact us at verysimple@portfoliobox.net
for any data-protection request.
What we process and why
- Account identity (Apple/Google identifier, email, name), to sign you in and sync your projects. Legal basis: performance of our contract with you.
- Your projects, tickets, labels and comments, to provide the app's core function and, where you connect one, to let an agent report into a project. Legal basis: performance of our contract.
- Project tokens (hashed, with a name and the project they open), so a connected agent can be told apart and revoked. Legal basis: performance of our contract.
- Subscription status from Apple, to know whether you may create tickets, comments and tokens. Legal basis: performance of our contract.
- Security logs, to keep the service safe. Legal basis: our legitimate interest in a secure service.
Where it is processed
In Amsterdam (EU), on Fly.io infrastructure. We do not transfer your data
outside the EU. If you connect a third-party agent, that agent's own provider
processes the tickets and comments in the one project you connected it to,
under their terms. That is your choice, and you control it with the token you
can revoke.
Your rights
- Access and portability: request a copy of your data in a portable format.
- Rectification: correct anything; you can edit tickets, labels, projects and your name in the app directly.
- Erasure: delete a ticket, comment or project in the app, or your whole account and everything tied to it under Account, Danger zone.
- Restriction and objection: ask us to pause or stop certain processing.
To exercise any of these, email
verysimple@portfoliobox.net. You also have the right
to complain to your local data-protection authority.
Sub-processors
- Fly.io: hosting and database (Amsterdam, EU).
- Apple: sign-in, subscription billing, and app distribution.
- Google: sign-in, when you choose it.