Data
Where your data lives, who can see it
Plain language, no policy theatre. If you have questions, write to dpo@evenworks.xyz and a person will reply.
We do not use AWS, Google Cloud, Cloudflare, or any third-party CDN or DDoS protection. Our infrastructure is operated by us, in Germany.
Where
Managed PostgreSQL on hardware we operate in Falkenstein, Germany. Encrypted at rest with AES-256. Encrypted in transit with TLS 1.3. Daily backups, retained for 30 days, in the same facility.
Who has access
The EvenWorks engineering team, on a least-privilege basis. Every read and write is logged. No third parties. No advertising. No model training.
How long we keep it
Account data, submissions, and file metadata: until you request deletion, then a 30-day grace period. Audit log entries are kept in anonymized form indefinitely for fraud prevention.
Data Protection Officer
Reach a person at dpo@evenworks.xyz. We aim to reply within five business days.
Subprocessors
| Name | Purpose |
|---|---|
| EvenWorks infrastructure | Hosting, storage, and processing — Falkenstein, Germany |
| Resend | Transactional email — US (EU SCCs in place) |
| Paytiko | Payment processing |
| Spaceship | Domain registration only — no hosting, no CDN, no DDoS service |