Privacy policy
This policy describes which personal data Taktane processes, for what purpose, and who it is shared with.
1. Controller
The controller responsible for data processing is Tizian Seibert, trading as "Taktane by Seibert" (sole proprietorship), Rastenhoschet 7, 8752 Näfels, Switzerland, hallo@taktane.com. Full provider details are in the legal notice.
2. What data we process
Account data: e-mail address and, when signing in via Google, the basic details Google provides (name, e-mail, profile picture). Project data: the value stream and process data you enter in the tool. Billing data: the plan you purchased and a customer reference at Stripe — payment card data itself is processed exclusively by Stripe, not by Taktane. Contact data: name, e-mail, company, job title, phone and message when you use the contact form, including the wording of any consent given. Attribution data: which campaign or search led to a visit (see "Cookies" below). Technical data: standard log data from the hosting infrastructure (e.g. IP address, timestamp, requested address) for security and troubleshooting.
3. Purpose of processing
We process this data to provide the account and the purchased functionality, to bill subscriptions, to respond to contact-form enquiries, to evaluate the effectiveness of marketing activities, to prevent abuse, and to meet statutory obligations, in particular in bookkeeping.
4. Legal basis
Processing in Switzerland is governed by the Federal Act on Data Protection (FADP), based on good faith, proportionality and purpose limitation. Where data subjects reside in the EU, we additionally rely on the GDPR: performance of a contract (Art. 6(1)(b)), consent (Art. 6(1)(a), e.g. for the contact form), or legitimate interest in a functioning and secure operation (Art. 6(1)(f)).
5. Recipients and processors
Taktane uses the following service providers, which process data on our behalf: Supabase (database, authentication, file storage) — the database runs in the EU, specifically in Frankfurt am Main, Germany (region eu-central-1); Vercel Inc. (hosting the website and application) — the application also runs in Frankfurt am Main (region fra1); Stripe (payment processing and invoicing for paid plans); and Google LLC (optional sign-in via "Sign in with Google"). Stripe and Google may process data outside Switzerland and the EU, in particular in the USA, and are contractually bound to an adequate level of data protection (standard contractual clauses or the providers' own data processing agreements). For the value stream and process data an organisation enters itself, Taktane acts as that organisation's processor rather than as controller — we provide a data processing agreement (DPA) on request.
6. Cookies and similar technologies
Taktane uses no cookies for third-party advertising or analytics. Necessary and set without consent: Supabase session cookies (keep you signed in), "NEXT_LOCALE" (remembers your chosen language), and "vsm_consent" (stores your decision on this cookie banner, valid 180 days). The one cookie that is not necessary is "vsm_attr": it records which campaign or search a visit first came from (only the details present in the requested address, e.g. utm_source), is readable server-side only, and expires after 30 days. For that cookie we ask for your consent via the banner at the bottom of the screen beforehand; you can decline or withdraw it at any time without affecting Taktane's functionality.
7. Retention period
Account data is kept until the account is deleted. Billing data is retained in line with statutory bookkeeping retention duties (generally ten years). Lead data is kept until its purpose no longer applies or deletion is requested. The attribution cookie expires automatically after 30 days, the consent decision after 180 days.
8. Your rights
You have the right to access the data processed about you, to have it corrected, deleted or its processing restricted, to receive it in a common format, and to withdraw any consent given at any time. Contact hallo@taktane.com for any of these. You may also contact the competent supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), or within the EU the authority responsible for your place of residence.
9. Data security
Data is transmitted encrypted (TLS). Access to stored data is restricted at the database level (row level security) to the people and organisations authorised for it. Passwords are stored hashed by our authentication provider; Taktane itself never sees them in plain text.
10. Changes to this policy
We update this privacy policy whenever the processing or the legal situation changes. The current version is always available at this address.
11. Contact
For privacy-related questions, reach us at hallo@taktane.com.
Last updated: September 19, 2026