Legal
Privacy policy
Last updated: 17 September 2026
This notice explains how Release Compass processes personal data. The controller is Pichner Gábor EV., trading as Pichner Gábor EV. — TechTrail, Hungary (registration 58563166, tax 48268822-2-39). Contact: info@techtrail.io, +36 30 269 8814. Company details: https://techtrail.io/en/contact/.
What we process
- Account data: email address, password hash (never the password itself), optional passkeys, optional authenticator secrets and recovery-code hashes, and session tokens kept in your browser’s session storage.
- Project content you submit: release notes, request titles, and optional requester or voter labels that your team sends through the API or MCP.
- Changelog subscriber emails and channel preferences, after you confirm the subscription.
- Technical logs needed to run the service (request identifiers, project identifiers, duration). We do not log Authorization headers, API keys, tokens, or passwords.
Legal bases (GDPR Art. 6)
- Contract (Art. 6(1)(b)) — creating and operating your account, projects, API keys, changelogs, and request boards.
- Consent (Art. 6(1)(a)) — email subscriptions to release notes. Confirm the link to subscribe; every message includes unsubscribe. You can withdraw consent at any time.
- Legitimate interests (Art. 6(1)(f)) — keeping the service secure (rate limits, hashed vote de-duplication, abuse prevention) and answering support mail. You may object.
- Legal obligation (Art. 6(1)(c)) — invoices and Hungarian tax records where we must retain them.
Cookies and similar storage
Sign-in tokens live in session storage, not cookies. We do not set advertising or analytics cookies. No cookie banner is required for this strictly necessary session storage. If we add non-essential cookies later, we will ask for consent first.
Processors and transfers
Depending on how an instance is hosted, email may be sent with Amazon SES and data stored in Amazon DynamoDB. Those processors act on our instructions. If a hosting region is outside the EEA, transfers rely on the EU–US Data Privacy Framework where applicable and/or the European Commission’s Standard Contractual Clauses, with supplementary measures as needed. Local development can run without those processors.
Request boards and names
Votes are accepted only through the API or MCP, never from the public page. Project admins choose whether requester and voter names are shown. Names are stored only if a caller sends them. Do not send special-category data.
Retention
Account and project data stay until you delete the account or we close it after prolonged inactivity. Subscriber emails are dropped on unsubscribe or account deletion. Hashed vote records stay with the request so duplicates can be rejected. Tax invoices follow Hungarian retention rules.
Your rights
You may request access, rectification, erasure, restriction, portability, and objection, and you may withdraw consent for email. Write to info@techtrail.io. You may also lodge a complaint with NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság) (https://www.naih.hu/, ugyfelszolgalat@naih.hu, Falk Miksa utca 9-11, 1055 Budapest, Hungary).
Children
Release Compass is a B2B product. We do not knowingly offer accounts to children under 16.