Privacy Policy

1. Controller

SYNICONE GmbH, Hans-Klein-Strasse 14, 81373 Munich, Germany
Email: info@synicone.com

2. Data processed when you use 123 Agenda

The service processes the information you enter into an agenda, including:

• agenda titles, dates, locations, and participant names;
• agenda items, descriptions, durations, owners, and follow-up tasks;
• optional view and edit passwords, which are stored only as salted hashes; and
• technical request data such as IP address, browser information, and request time.

Processing is necessary to provide the service you request (Art. 6(1)(b) GDPR) and to keep it reliable and secure (Art. 6(1)(f) GDPR).

3. Sharing and access

Every agenda has a unique link. Anyone who receives that link can access the agenda unless you set a view password. An edit password controls editing separately. Please avoid adding sensitive personal data and share links only with intended recipients.

4. Storage on your device

Your browser stores a short list of agendas opened on that device so they can appear on the homepage. You can remove this data through your browser settings.

A strictly necessary, encrypted access cookie named “agenda-grants” remembers access and edit permissions for up to seven days. It is required for password-protected agendas and is not used for advertising or tracking.

5. AI agenda drafting

If you choose “Draft with AI,” the prompt you submit is sent through Lovable’s AI service to an AI provider to generate a draft. This happens only when you use that feature. Do not include confidential or sensitive personal data in prompts.

6. Hosting, storage, and infrastructure providers

Frontend hosting. The application is hosted by Netlify, Inc., using its cloud hosting infrastructure and content delivery network (CDN).

Database and backend. Application data is stored and processed using Supabase, with our primary database hosted in Frankfurt, Germany (EU Central).

Data residency. Our primary application database, authentication services, and associated storage are hosted in the European Union. Limited processing outside the EU may occur through infrastructure providers, technical logs, support services, or content delivery networks.

Data security. We use encrypted HTTPS connections, access controls, and infrastructure-level security measures to protect application data.

Subprocessors. We use Netlify and Supabase as infrastructure service providers. Their respective data processing agreements and applicable safeguards govern their processing of personal data.

Infrastructure providers. Netlify provides frontend hosting, content delivery, and related technical infrastructure (website: www.netlify.com). Supabase provides database hosting, backend services and, where applicable, authentication and file storage, with a primary project region in Frankfurt, Germany (website: supabase.com).

Fonts are loaded from Google Fonts; your browser therefore connects to Google when a page is opened. Where personal data is transferred outside the European Economic Area, this happens on the basis of applicable legal safeguards.

7. Retention and deletion

Agenda data is retained while the agenda remains in the service. Technical logs are kept only as long as needed for security, troubleshooting, and legal obligations. To request deletion of an agenda or personal data, contact us and include the agenda link. We may need proof that you are entitled to control the agenda before acting.

8. Your rights

Subject to the GDPR’s requirements, you may request access, correction, deletion, restriction, portability, or object to processing. You may also withdraw consent for future processing and lodge a complaint with a competent data protection authority. Contact us at the email address above to exercise these rights.

9. Changes

We may update this policy when the service or legal requirements change. The current version and its date are published on this page.