Privacy

Who is responsible

Team Creative runs the cabinet and is responsible for the data of its users, sign-ins, decisions and comments. The messages your website's visitors send through its forms are kept by Team Creative for you and on your instructions: your company decides about them.

What we store and why

• The name and e-mail address of each person your company invites to the cabinet, and their role: so you can sign in and see your company's work.
• Your password only as a one-way hash, your sign-in sessions and the sign-in links we e-mail: to keep signing in safe. Sign-in attempts for one day: to stop password guessing.
• Your decisions (approvals, change requests, chosen designs), comments, brief answers, ideas and answers to offers: so the team can act on them and it stays clear who decided what.
• Messages from your website's forms (what a visitor types, for example a name, an e-mail address, a phone number and a text): so you receive and answer them. With each message we also keep the sender's browser description (its user agent) and a hash of their IP address, made with a key that exists only for that day and only in the server's memory (never the address itself): to tell spam and abuse apart.
• Visit counts per day (views and visitors per page and language). A visit's IP address and browser description are not stored: unique visitors are counted with a hash salted anew every day, and only the totals are kept.
• Files the team shares with you (designs, project files, the signed contract).
• A record of the e-mails the cabinet sends (to whom and when): so each one arrives once and on time.

On what basis

• Accounts, sign-ins, decisions, comments and files: to perform the contract between Team Creative and your company (the cabinet is part of that service).
• Sign-in attempts, sessions and the record of sent e-mails: Team Creative's legitimate interest in keeping the cabinet safe and reliable.
• Website form messages and visit counts: on your company's instructions. Your company decides why its website collects them and needs its own basis for that (for example, a visitor asking to be contacted).

Cookies

The cabinet uses one necessary cookie, the one that keeps you signed in. No advertising or analytics cookies and no third-party scripts; even the fonts come from our own server.

Who helps us

These services help Team Creative process the data:

• Microsoft Azure: the server and the database, in a data centre in Sweden (Sweden Central, EU).
• Resend (USA): sends the cabinet's e-mails (invitations, sign-in links, notifications, website form messages); it receives the recipient's address and the e-mail's text, including a form message's content. These data are transferred to the USA, outside Georgia.
• Better Stack: checks that the cabinet is up; it receives no personal data.

How long we keep it

• Website form messages (with their hash and browser description): 12 months, then they are deleted automatically (you can delete them sooner).
• Visits: only as daily counts.
• File originals: 180 days after their last use; after that only a small preview stays here, and the team keeps the original.
• Accounts: until your company's contract with Team Creative ends. When a colleague's access is removed, their name and e-mail address stay in the company's history (who decided what) until then too; you can ask us at the address below to erase them sooner. Expired sessions and links are deleted within a week, the record of sent e-mails after 30 days.

Your rights

Under Georgia's Law on Personal Data Protection (No. 3144, 2023) you may:

• be told which of your data we process, and get a copy;
• have it corrected, updated or completed;
• have it deleted or its processing restricted;
• have your data transferred;
• withdraw consent and object to processing where the law allows it;
• complain to the Personal Data Protection Service of Georgia.

Contact

To ask a question or make a request, write to privacy@teamcreative.ge. Your company's owner can also remove a colleague's access in Settings.