Privacy Policy

How paraboll.online handles personal information when you use our website and retrospective tool.

This privacy policy explains how paraboll.online("we", "us") collects, processes, and protects personally identifiable information ("PII") when you use https://paraboll.onlineand our online retrospective service (the "Service"), operated by RL Solutions (auto-entrepreneur (micro-entreprise), France). We provide this policy so you understand what we collect, how we use it, and what choices you have. We aim to align with widely recognized privacy principles, including the California Online Privacy Protection Act (CalOPPA), the U.S. Federal Trade Commission's fair information practice principles (FIPPs), and the EU General Data Protection Regulation (GDPR) where it applies to you.

TL;DR

You can use many features without creating a traditional account; when you join a retro room we may store a display name and activity you submit in that room.
Meeting content (cards, votes, comments, action items) is stored in our database so participants can collaborate in real time.
We use browser storage (such as localStorage) to remember your participant identity in a room on your device.
Optional voluntary payments are processed by Stripe; we do not store full payment card numbers on our servers.
We do not sell your personal information.
You can contact us to exercise privacy rights or ask questions at any time.
We do not knowingly collect personal information from children under 16.

What personal information do we collect?

Depending on how you use the Service, we may collect:

Display name or nickname you choose when joining a retrospective room
Retrospective content you submit (cards, votes, comments, reactions, action items)
Room metadata (template, phase, facilitator settings) needed to run the meeting
Support messages if you contact us through in-product support or email
Technical data such as IP address, browser type, and timestamps in server logs
Payment-related information handled by Stripe when you make a voluntary contribution (we receive limited confirmation data, not your full card number)

We do not require an email address to start or join a basic retrospective room. If you email us directly, we process the information you include in your message.

When do we collect information?

When you create or join a retrospective room
When you submit cards, votes, comments, or other meeting content
When you use optional support or feedback features
When you make a voluntary payment through our Stripe payment link
When you browse our marketing pages (limited technical logs)

How do we use your information?

We use information we collect to:

Provide, operate, and secure the retrospective Service
Synchronize realtime collaboration between participants in a room
Respond to support requests and improve the product
Process voluntary payments and prevent abuse or fraud
Comply with legal obligations and enforce our Terms of Service
Send service-related communications when necessary (for example, responding to a support request you initiated)

We use subprocessors to host data and process payments. See "Third-party disclosure and processing providers" below.

How do we protect your information?

We use HTTPS (TLS) to encrypt data in transit between your browser and our infrastructure.
Access to production systems and databases is limited to people who need it to operate the Service.
We rely on established cloud providers for database hosting and apply reasonable administrative and technical safeguards.
Voluntary payments are processed by Stripe; card data is sent directly to Stripe and is not stored on our application servers.

No method of transmission or storage is 100% secure. If you believe your data or account access has been compromised, contact us promptly at lolatalbon@gmail.com.

Your choices and rights

Transparency

This policy describes what we collect, how we use and share it, and how you can exercise control. For security practices, see our Security FAQs.

Access, correction, and deletion

Because rooms are often accessed via a shared link rather than a password-based account, you may need to contact us to verify your request. Email lolatalbon@gmail.com to request access to, correction of, or deletion of personal data we hold about you. We may need to verify your identity before fulfilling certain requests.

Withdrawal of consent

Where processing is based on consent, you may withdraw consent by contacting us. Withdrawing consent may limit your ability to use parts of the Service that require that data.

Data retention

We retain retrospective and account-related data for as long as needed to provide the Service, resolve disputes, enforce agreements, and comply with law. When you ask us to delete data, we will take reasonable steps to delete or anonymize it, subject to legal retention requirements and backup cycles.

EEA residents

If you are in the European Economic Area, you may have additional rights under GDPR, including the right to lodge a complaint with your local supervisory authority.

Cookies and browser storage

We use browser storage (including localStorage) to remember your participant identity within a retrospective room and to improve your experience. Your browser may also store standard cookies for basic site operation.

You can control cookies and storage through your browser settings. Disabling storage may prevent you from rejoining a room with the same participant identity or using some features.

Third-party disclosure and processing providers

Disclosure

We do not sell, rent, or trade your personal information. We may share information with service providers who help us operate the Service, under confidentiality obligations, or when required by law, to protect rights and safety, or to enforce our policies.

Processing providers

Subprocessors we use to operate paraboll.online include:

Provider	Purpose	Typical data location
Supabase, Inc.	Database, authentication infrastructure, realtime sync	eu-west-1 (European Union — Supabase)
Stripe, Inc.	Voluntary payment processing	United States and other regions per Stripe

Our primary database is hosted in the EU (eu-west-1 (European Union — Supabase)). Hosting for the web application may be provided by our deployment platform in addition to Supabase.

International transfers

Retrospective data is primarily stored in the European Union (eu-west-1 (European Union — Supabase)). Some providers (for example Stripe for voluntary payments) may process data in the United States or other countries. Where required, we rely on appropriate safeguards for international transfers.

CalOPPA

Consistent with CalOPPA, we agree that:

Users can visit our site without providing personal information beyond what their browser automatically sends
A link to this Privacy Policy is available in our site footer
Users can contact us about privacy practices and personal information
We will post updates to this page when we make material changes

Minors

paraboll.online is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact lolatalbon@gmail.com and we will take steps to delete it.

We do not knowingly market to children under 13.

Do Not Track

Some browsers send "Do Not Track" signals. Because there is no consistent industry standard, we do not respond to all DNT signals in a uniform way.

Data breach notification

If we become aware of a data breach that affects your personal information, we will take steps consistent with applicable law, which may include notifying affected users and regulators within reasonable timeframes.

CAN-SPAM

If we send email to you (for example, in response to a support request), we will honor opt-out requests where applicable and will not use false or misleading header information.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date below. Continued use of the Service after changes constitutes acceptance of the updated policy.