What this portal stores
This page lists the personal data the portal and its login keep, and why. The full privacy policy of DigitalCreek is at digitalcreek.io/datenschutz; the imprint is at digitalcreek.io/impressum.
Where
The portal, its login service and their backups run on servers operated for DigitalCreek in Germany. The pages load nothing from other websites: no trackers, no analytics, no external fonts or scripts.
What is stored
| Data | Why | How long |
|---|---|---|
| Login: user name, name, e-mail address, company; for logins created by us also a password hash and the authenticator app setup | To sign you in and show your company's advisories only | While your access exists |
| Session: a random session ID (stored only as a hash) and two cookies (login state, session) | To keep you signed in | Up to 8 hours, then deleted |
| Your choices: required actions and comments, with your name and the time | Your company and DigitalCreek see who decided what | While the advisory is kept |
| API keys: a hash of the key, its label, created, expiry and last-used dates | To check keys and let you manage them | Until you or we remove them |
| Notifications: where to send (your login e-mail address, or the Teams workflow URL you entered), your settings and the delivery state | To send the messages you asked for | Until you remove the notification or your access ends |
| Access log: time, IP address and what was done (login, logout, changes, API use) | Security: to detect and investigate misuse | One year |
Who receives data
- E-mail notifications are delivered through an e-mail delivery service (Mailtrap) that sends them on our behalf.
- Teams notifications go to the Microsoft Teams workflow your team set up, under your company's Microsoft account.
- Nobody outside DigitalCreek and your own company sees your company's data in the portal.
Your rights
To see, correct or delete your data, or to end your access, contact your DigitalCreek contact. The rights listed in the privacy policy apply.