GDPR

IdeaPlan is committed to upholding compliance with GDPR.

What is GDPR?   
‍The GDPR (General Data Protection Regulation) is a  data protection law that has been live since May 2018. GDPR replaced the prior EU Data Protection law to strengthen the protection of “personally identifiable information” and the rights of the individual. GDPR is a set of rules and guidelines which govern the processing and monitoring of EU data.
‍
‍GDPR Compliance Questions
‍What personal data is collected?
- Names and email addresses.
- Customer data includes, names, email addresses.
‍
‍Where is data stored and processed?
‍All data is stored in the United States (with MongoDB on AWS) and processed with Amazon Web Services (AWS). It is a common misconception that EU data residency is a requirement of GDPR.  We are dedicated to handling all data in a compliant manner.

‍What third-parties do you share data with?
‍Name and Address - Purpose

Amazon Web Services - 440 Terry Ave N Seattle, WA 98109 - Data Storage & Processing - DPA as part of TOS

Google Analytics - 1600 Amphitheatre Parkway Mountain View, CA 94043 - Analytics - DPA Signed

MongoDB on AWS- 633 Broadway 38th Floor New York, NY 10019 - Data Storage - DPA as part of TOS 

Please note that all IdeaPlan data processor providers have been checked to be all GDPR-compliant (Stripe). 

How do I exercise my GDPR rights as a data subject?
You can contact us via email to support@ideaplan.io

‍What are your company details?
‍IdeaPlan is operated by IdeaPlan LLC.