Privacy Policy

1. Who this applies to

This policy covers LeafWiki Hosted, the managed version of LeafWiki operated by socradev GmbH (see Imprint) — both the account you sign up with and the wiki instance it provisions for you. For account and wiki data, socradev GmbH is the data controller. Content your team puts inside its own wiki is yours; we host it, we don't use it for anything else — see section 4.

2. What we collect

To create and run your account and hosted wiki, we process:

• Your email address and a salted hash of your password — we never store the password itself
• A session cookie, so you stay signed in
• The wiki(s) you create: subdomain, plan, and status
• Basic technical logs (IP address, timestamp, request path), kept for a short period for security and abuse prevention, then rotated out

We process this because it's necessary to provide the service you signed up for (Art. 6(1)(b) GDPR), or in the limited case of security logs, our legitimate interest in keeping the platform safe (Art. 6(1)(f) GDPR).

3. Cookies

We use one functional cookie to keep you signed in. No analytics, no advertising, no third-party tracking scripts.

4. Your wiki content

Your wiki has its own separate login and stores whatever your team puts into it. We don't read, analyze, or otherwise use that content — we host it, back it up, and (only if you ask us to) help migrate or troubleshoot it. If your wiki content includes personal data about other people (customers, colleagues, etc.), you're the controller for that data; we process it on your behalf as a hosting provider.

5. Who we share data with

We use a small number of providers to run the service, each seeing only what they need to do their part:

• Hetzner — the servers your account and wiki run on, located in the EU
• Resend — sends account emails (verification, password reset, notifications)
• GoDaddy — our domain registrar; only handles the DNS record that points your wiki's subdomain at our servers, nothing else

We don't sell your data, and we don't share it with anyone else except where the law requires it.

6. How long we keep it

• Account data: for as long as your account is active.
• A cancelled wiki: deleted, content included, after a short grace period that lets you undo the cancellation.
• Backups of a deleted wiki: kept for a limited time afterward as a safety net, then purged.
• Technical logs: kept for a couple of weeks, then rotated out.

7. Your rights

Under the GDPR you can ask us to access, correct, delete, or export the personal data we hold about your account — write to patrick@leafwiki.com. You can also lodge a complaint with the Austrian data protection authority (Österreichische Datenschutzbehörde).

8. Changes to this policy

We'll expand this policy as the product moves from beta to paid launch. Material changes will be communicated to active users before they take effect.

9. Contact

Questions about this policy or your data: patrick@leafwiki.com. See Imprint for our full company details.