[Operator name], [Registered address]. Data protection contact: [privacy@example.com].
Account data (name, work e-mail, phone if provided, role), sign-in records (time, IP address, browser), subscription and payment data (processed by the payment provider), and case content that the customer enters into the service.
Providing the service under contract (Art. 6(1)(b) GDPR), security and abuse prevention (Art. 6(1)(f)), and tax obligations (Art. 6(1)(c)). Case content is processed on behalf of the customer under the DPA.
Account data for the term of the subscription; sign-in records for [period]; payment records as required by tax law; customer data until deletion on request plus the backup cycle.
Access, rectification, erasure, restriction, portability, objection and complaint to a supervisory authority. Send requests to [privacy@example.com].