Privacy Policy
Last updated: 29 July 2026
Who we are
HoldTheFort is a handover platform operated by Sebastianus Weiler ("HoldTheFort", "we", "us"), a sole trader trading as HoldTheFort. . Sebastianus Weiler is the data controller for personal data processed through the HoldTheFort service, as defined by the EU General Data Protection Regulation (GDPR) and the UK GDPR.
Data we collect
- Account data: email address, full name, hashed authentication credentials.
- Handover content: projects, tasks, contributors, check-ins, and updates you or your collaborators submit.
- Generated recaps: AI summaries created from your handover updates.
- Operational metadata: timestamps, IP address, device/browser identifiers, and log data needed to run and secure the service.
- Support correspondence: messages you send us and our replies.
Why we process it, and the legal basis
- Providing the service (create your account, run handovers, generate recaps) — performance of a contract (Art. 6(1)(b) GDPR).
- Security, abuse prevention, and service improvement — legitimate interests (Art. 6(1)(f)) in keeping the service safe and reliable.
- Transactional and service emails — performance of a contract (Art. 6(1)(b)).
- Optional marketing emails, if you opt in — consent (Art. 6(1)(a)), withdrawable at any time.
Who we share data with
We share personal data only with the following categories of recipient, and only as needed:
- Hosting and database infrastructure (managed cloud provider, EU region) — processor.
- Email delivery provider — sends authentication and transactional emails on our behalf — processor.
- AI model providers — generate handover recaps from your content under a data-processing agreement; prompts and outputs are not used to train their models — processor.
- Professional advisers (accountants, legal) where strictly necessary.
- Public authorities where required by law.
We do not sell your personal data and do not share it for advertising.
Where it is stored & international transfers
Application data is hosted on managed infrastructure in the European Union. Some subprocessors (e.g. AI providers) may process data outside the EU/UK; where they do, transfers are covered by Standard Contractual Clauses or an equivalent safeguard.
Retention
We keep handover content while your account is active. When you delete your account from Settings, we permanently remove your profile, projects, tasks, contributors you own, check-ins, and generated recaps. Backups roll off within 30 days.
Your rights
You have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, and to withdraw consent where processing is based on consent. Exercise these rights from Account Settings or by using our . We respond within one month. EU/UK users may also lodge a complaint with their local supervisory authority.
Security
We use appropriate technical and organisational measures — encryption in transit, encryption at rest for the database, least-privilege access controls, and audit logging — to protect personal data.
Cookies
HoldTheFort uses only strictly necessary cookies for authentication and session management. We do not run advertising or third-party tracking cookies.
Contact
Sebastianus Weiler, trading as HoldTheFort. Questions or privacy requests? .