Privacy policy for IT4S
This is a convenience translation. The German version is legally binding. Deutsche Fassung
1. Controller and contact#
Silvertip IT-Solutions GmbH, Grabenweg 68, 6020 Innsbruck, Austria; FN 599795b, VAT ID ATU79178079. Email: privacy@it4s.at, phone +43 664 9111 489. We have not appointed a data protection officer as we are not legally required to.
2. Our two roles#
- Controller for the website it4s.at, your IT4S account (sign-in, security), billing, support, system emails and the security of the service. This policy covers these.
- Processor for the content customers store in their workspaces (projects, issues, comments, documentation, files, time logs, member lists). The customer running the workspace (e.g. your employer) is the controller; we process this content only on its instructions under our Data Processing Agreement (DPA). Please address questions about workspace content to your workspace administrator first.
3. Website it4s.at#
Server logs (IP address, date and time, page, browser, OS, referrer) for delivery, stability and security; Art. 6(1)(f) GDPR; deleted after 14 days. Enquiries by email or phone are processed to answer them (Art. 6(1)(b) or (f) GDPR). We use no analytics, tracking or marketing tools on it4s.at; fonts are self-hosted.
4. Your IT4S account#
We process your name, email, password (hashed only), avatar, language and theme; email confirmation codes (valid 15 minutes) and two-factor secrets (encrypted); if you use Google sign-in, your Google ID, name, email and picture; sessions (device, IP address, time), API tokens and app connections (stored as hashes); your workspace memberships and roles. When you accept the terms, the DPA or this notice, we record the document, version, time, IP address, browser and, for a workspace, the company, as proof of the contract (Art. 6(1)(b) and (f) GDPR). Purpose: providing the account and secure sign-in (Art. 6(1)(b) and (f) GDPR). One account per email serves all your workspaces; workspace admins only see your membership in their workspace. Kept until you delete your account, which you can do under My Profile › Privacy once you own no workspace and are no workspace's last admin; there you can also download your account data. After deletion, what you wrote in workspaces shows as "Deleted user"; the content itself belongs to each customer and stays there.
5. Workspaces and content#
Processed as processor (section 2). A person who creates a workspace becomes its owner and accepts the DPA for the customer. A deleted workspace is locked at once and erased with its files and backups after 30 days; remains in platform backups and logs expire at the latest 30 days after that. Free workspaces inactive for 12 months are deleted after emails 30 and 7 days before. Nightly backups are kept 7 days (Free) or 30 days (Team). Our staff only see workspace content with support access approved by a workspace admin (max. 24 hours, logged).
6. MCP, API and connected apps (e.g. Claude)#
When you connect an app such as Claude, a script or another AI tool through MCP (mcp.it4s.at) or the API, you grant it access to one workspace in the scope you choose. We log the connection (app name, scope, time, last use) and show in the history which change was made through which app (Art. 6(1)(b) and (f) GDPR). Data the app reads leaves IT4S at your request and is processed by the app's provider under its own terms (e.g. Anthropic for Claude); that provider is not our processor. You can revoke connections at any time under Connected Apps.
Public demo (demo.it4s.at): a workspace with made-up data (Example Ltd) that anyone can read without signing in, in the browser, through MCP and through the API; it starts over every hour. There is no account, no sign-in and no input of personal data. We only process what every request brings: your IP address, to limit requests per address (counters in memory, at most until the end of the day), and the server logs (14 days, see section 3). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a safe demo free of abuse). The demo sets no cookies; your choice of language and display stays in your browser only (section 12).
7. AI features (optional)#
Optional AI features (e.g. summaries, release scope suggestions) are off by default and switched on by a workspace admin, who enters the customer's own Anthropic API key. When used, the content needed (e.g. issue titles and descriptions) is sent with that key to Anthropic for processing by a language model, on the customer's behalf and choice and under the customer's own contract with Anthropic; Anthropic is not our sub-processor. Under its commercial terms Anthropic does not train its models on API data. The customer is responsible for transfers to the USA under its contract with Anthropic. We store the key encrypted and use it only for that workspace's AI features. AI output can be wrong and must be checked. We make no automated decisions under Art. 22 GDPR.
8. Billing (Team plan)#
Company name, billing address, VAT ID, contact person, email, plan, number of active users and invoices; payments via Stripe (Stripe Payments Europe, Ltd., Dublin), where the customer enters card or bank details directly. Stripe is our processor for subscriptions, invoices and tax calculation; for processing payments, fraud prevention and legal checks (e.g. anti-money laundering) Stripe acts as an independent controller under its own privacy policy. Art. 6(1)(b) and (c) GDPR. Invoices and accounting records are kept 7 years (§ 132 Austrian Federal Fiscal Code).
9. Emails#
System emails (codes, invitations, notifications, limit, security and deletion notices); you choose your notifications in IT4S, security and contract emails cannot be turned off. Art. 6(1)(b) and (f) GDPR.
10. Notices of illegal content (Digital Services Act)#
You can report illegal content in IT4S to legal@it4s.at (Art. 16 DSA); requests from authorities go there too. We process the contact details of the person reporting, the notice, the content concerned and our decision with its reasons, to handle the notice, to give the statement of reasons to those affected (Art. 17 DSA) and to defend legal claims. Legal basis: Art. 6(1)(c) and (f) GDPR. Kept for 1 year.
11. Recipients and processors#
Processors under Art. 28 GDPR, current list at it4s.at/subprocessors: Google Cloud EMEA Ltd. (hosting, Frankfurt data centre; logs, stored in Frankfurt, and uptime checks from the EU and the USA, see section 13; email via Google Workspace), Stripe Payments Europe, Ltd. (payments), Google Ireland Ltd. (Google sign-in, only if used). Transfers to the USA rely on the EU-US Data Privacy Framework adequacy decision (Art. 45 GDPR) where the recipient is certified, otherwise on Standard Contractual Clauses (Art. 46(2)(c) GDPR). Integrations and services a workspace sets up itself (AI features with its own Anthropic key, GitHub, Jira/Confluence import, outgoing webhooks, own SMTP server) transfer data on the customer's behalf and choice.
12. Cookies and local storage#
Only strictly necessary cookies (sign-in) and browser storage for interface preferences (theme, sidebar, font size); permitted without consent under § 165(3) TKG 2021. No tracking. The website it4s.at sets no cookies; it only stores a theme you choose in your browser. See the cookie policy.
13. Security#
TLS in transit, encryption at rest in Google Cloud, workspace isolation in the database (row-level security), hashed passwords, two-factor authentication, logged staff access (audit log kept 2 years). Details in the technical and organisational measures annexed to the DPA.
Logs, error messages and monitoring, for the stability and security of the service (Art. 6(1)(f) GDPR):
- Access logs of the app, API and MCP (IP address, time, address requested, browser) are kept for 14 days. Requested addresses can contain one-time or time-limited links, e.g. for invitations or file uploads.
- Error messages are part of these logs and are kept for 14 days as well. An error message can contain personal data or fragments of workspace content, e.g. an email address.
- Uptime checks run from Google locations in the EU and the USA. They only request technical status addresses and transfer no personal data.
Logs are stored in the EU (Google Cloud, Frankfurt). Only the audit logs of the cloud administration that Google prescribes (who changed which infrastructure setting) are kept in a global store; they contain no workspace content. For support access by Google LLC the transfer bases in section 11 apply.
14. Retention#
Server, load balancer and access logs 14 days; counters per IP address of the public demo in memory, at most until the end of the day; account until you delete it; workspace content until the customer deletes it + 30 days, remains in platform backups and logs at the latest 30 days after that; backups 7 days (Free) / 30 days (Team); audit log 2 years; acceptance of the terms and the DPA for the term of the contract + 3 years, also after the account or workspace is deleted; invoices 7 years; support requests until resolved + 12 months; notices of illegal content (DSA) 1 year.
15. Your rights#
Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7(3) GDPR). Most account data you can view, change, export and delete yourself. For workspace content contact its administrator; requests we receive about it are forwarded to the customer.
16. Complaints#
Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
17. Changes#
We update this policy when the service or the law changes and tell signed-in users about material changes in the app or by email.