This policy explains what personal data Atend processes, why, and the rights you have under the EU General Data Protection Regulation (GDPR). Atend is built on a simple principle: we record what youdid, never the content of your work.
1. Controller
ClarityBuilds Ltd, Centris Business Gateway, Level 4/W, Triq is-Salib tal-Imrieħel, Zone 3, Central Business District, Birkirkara CBD 3020, Malta. Email: info@claritybuilds.net. Given our size and the nature of our processing, we are not required to appoint a Data Protection Officer; privacy enquiries go to the address above.
2. What we process
- Account data: your name, email, hashed password, workspace and team membership.
- Captured activity metadata: idle/active state, the name (not contents) of the foreground application, whether a tracked agent or process was running, start/end times, and the project a block is attributed to. We do not collect keystrokes, screenshots, screen contents, document or message contents, browsing history, webcam, microphone, or location.
- Billing data: the company name, address, and VAT identification number we need to issue invoices. We invoice directly and receive payment by bank transfer. We do notcollect or store card details.
- Technical data: server logs, IP address, and device identifiers needed to run and secure the service.
3. Purposes & legal bases
- Providing the service (account, capture, classification, invoicing): performance of a contract, Art. 6(1)(b).
- Security, abuse prevention, and service improvement: legitimate interests, Art. 6(1)(f).
- Any marketing emails you opt into: your consent, Art. 6(1)(a), withdrawable at any time.
4. Processors & sub-processors
We use a limited set of processors under data-processing agreements:
- Hosting: Microsoft Azure, EU region (Germany West Central). Your data is stored in the EU.
- Transactional email: IONOS (EU), for account emails such as password resets and team invites.
- Payments: we invoice directly; payment is received via our business bank. No card data passes through Atend.
We do not currently use third-party web analytics or advertising trackers. Our core data is hosted in the EU, so no transfer to a third country takes place for it; should that change, we will rely on an adequacy decision or the EU Standard Contractual Clauses and update this policy.
5. Retention
We keep account and activity data for as long as your account is active, and delete or anonymise it within 30 days of account closure, except where longer retention is legally required (e.g. invoices, which Maltese law requires us to keep for the statutory period).
6. Your rights
You have the right to access, rectify, erase, restrict, and port your data, and to object to processing based on legitimate interests. You can export and delete your data from within the app at any time. You may also lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner (IDPC).
7. Cookies
The application uses only the strictly necessary cookies required to keep you signed in. We do not use advertising or cross-site tracking cookies.
8. Changes
We will post material changes here and, where appropriate, notify you by email. Contact: info@claritybuilds.net.