Your data

GDPR

Export and deletion are part of the dashboard, under Settings, Data. You do not have to write to us to answer one of your customers.

Who is responsible

For your customers' accounts, votes and comments, you are the controller and CatchLoop is your processor, under the Data Processing Agreement. A customer who wants their data or their account gone asks you, and you do it from the dashboard. For your own account as an admin, CatchLoop is the controller: see the privacy policy.

What a customer account holds: an email address, an optional display name, the requests, votes and comments it made, and which requests it muted. The application and its database are hosted in France; the full list of subprocessors is on the security page.

Export

Export workspace data downloads one JSON file: the workspace, every request, vote and comment, the customer accounts, the changelog and the record of announcement emails sent. Server secrets are never in it.

Deletion

Find a customer by their email address and delete them. Their account, their votes and their comments are removed for good, not hidden, and the vote counts of the requests they voted on are recounted. Requests they posted stay on the board, with no author.

Closing your workspace (Settings, Danger zone) deletes all of it: every request, vote, comment and customer account.