Privacy Policy

Last Updated: July 2, 2026

Introduction

FACTUM ERIT ("we", "us", or "our") is committed to protecting your privacy and being transparent about how we collect, use, and store your data, in compliance with GDPR and other privacy regulations.

Data We Collect

1. Account Information

When you create a FACTUM ERIT account: your email address, platform type, registration timestamp, and user ID.

2. Your Vikunja Workspace

The projects, tasks, boards and related content you create in your connected Vikunja account.

3. Usage Logs

Logs of your interactions with the service (access logs, command history) for security and service quality. Automatically deleted after 90 days.

4. Tokens

The API tokens we store to act on your behalf are encrypted at rest.

Data Retention

Data Type	Retention Period	Reason
Account information	Until account deletion	Service provision
Access logs / command history	90 days	Security and support
Accounting ledger entries	Retained after deletion	Financial record-keeping (legal obligation)
Abuse-prevention data	Retained after deletion	Fraud/abuse prevention (legitimate interest)
Waiting list	90 days after last activity	List management

Your Rights (GDPR)

Right to Access & Portability

You can request a copy of all your data in machine-readable JSON at any time. Email privacy@factumerit.app with the subject "Data Export Request".

Right to Deletion ("Right to be Forgotten")

Email us with "Delete My Account" in the subject line. When you delete your account we permanently remove:

• Your profile and account record
• Your Vikunja account and all its data — projects, tasks, boards, sessions and API tokens
• The encrypted tokens we stored and their metadata
• Your access logs, command history, settings, and connection state
• Your budget and transaction history (your remaining balance is forfeited)

A small set of records is retained where the law allows: accounting ledger entries (financial record-keeping) and abuse-prevention data (legitimate interest). Data held by third-party services you connected (e.g. Google Calendar) must be deleted with that provider. Deletion completes within 30 days.

Data Security

• Encryption at rest: tokens encrypted using Fernet
• Encryption in transit: HTTPS/TLS for all connections
• Access controls: role-based access to admin functions

Data Sharing

We do not sell your personal data. We share data only with infrastructure providers, when required by law, or with your explicit consent.

Children's Privacy

FACTUM ERIT is not intended for children under 16. If you believe we have collected data from a child, contact us immediately.

Changes to This Policy

We may update this policy from time to time and will update the "Last Updated" date above.