Privacy Policy

Effective Date: 01.01.2026

1. Controller

swoin.io - Denis Manig c/o Online-Impressum.de #5704

Europaring 90 53757 Sankt Augustin

2. Collection and Processing of Personal Data

2.1 Registration and Login

When registering via GitHub, Google, or Microsoft, the following data is collected:

• Name
• Email address
• Profile picture
• OAuth provider ID

2.2 Platform Usage

During platform use, the following data is processed:

• Transaction data (Innovation Token purchases and usage)
• Project data and feature voting
• Payout requests and SEPA account details

2.3 External Services

• Stripe: Processing of payment data
• OAuth Providers: GitHub, Google, Microsoft for authentication

3. Purpose of Data Processing

Processing occurs for:

• Provision of platform services
• Processing of payments and payouts
• Fraud prevention
• Fulfillment of legal obligations

4. Legal Basis

Processing is based on:

• Art. 6 (1) lit. b GDPR (contract fulfillment)
• Art. 6 (1) lit. c GDPR (legal obligation)
• Art. 6 (1) lit. f GDPR (legitimate interest)

5. Storage Duration

We store your personal data only as long as necessary to fulfill the respective purpose or as required by statutory retention obligations. Customer data is stored for the duration of the business relationship and beyond in accordance with statutory retention periods (up to 10 years pursuant to § 147 AO, § 257 HGB).

6. Your Rights

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object (Art. 21 GDPR)

7. Right to Complain

You have the right to lodge a complaint with a supervisory authority.

8. Changes

We reserve the right to modify this privacy policy.