Privacy Policy
Last updated: August 22, 2026
This policy explains what data Donzy collects, why, and what rights you have over it. Donzy is a product awareness platform: it helps a team publish and celebrate what shipped, so the data below is mostly what your organization creates while using it — not data collected from outsiders.
Who we are
Donzy is operated by the team building it. For any privacy question or request, contact hello@donzy.app.
What we collect
- Account & profile — your name, email address, password (stored hashed, never in plain text), organization, role, department, timezone, and an optional profile photo.
- Content you create — product updates you write or contribute to, comments and replies, emoji reactions, and kudos messages you give or receive.
- Preferences — whether you're opted in to the weekly digest email, and your light/dark appearance setting.
- Technical data — cookies required to keep you signed in and to remember your cookie-consent choice.
Why we process it
We process account, profile, and content data because it's necessary to provide the service you and your organization signed up for. Optional analytics on our public, signed-out pages runs only after you consent via the cookie banner, and helps us understand how the marketing site and blog are used.
Cookies
Strictly necessary — a session cookie that keeps you signed in, CSRF protection, your theme preference, and your cookie-consent choice itself. These aren't optional: the product doesn't function without them, so they aren't covered by the cookie banner.
Analytics (optional) — we use PostHog, hosted in the EU, only on public pages (the marketing site, blog, sign-up, and sign-in) for visitors who aren't signed in. PostHog never runs inside the product once you're signed in, and only loads after you accept the cookie banner. Declining has no effect on your ability to use Donzy.
Who we share it with
- Mailjet (EU) — sends transactional email: invitations, password resets, and the weekly digest if you're opted in.
- PostHog (EU-hosted) — anonymous analytics on public pages only, as described above.
- Hetzner Online GmbH (Germany) — hosts our servers, database, and uploaded files. We don't use a separate third-party cloud storage provider; files are stored directly on our own servers in the EU.
We don't sell your data, and we don't use it for third-party advertising.
How long we keep it
We keep your data while your account and organization are active. If you delete your account, we immediately invalidate your login credentials, delete your profile photo, and remove your personal activity (comments, reactions, kudos you gave). Your name stays attached to the work you shipped and any kudos you received on it — deliberately, since crediting people for what they built is the point of the product. If you'd like that credit removed as well, contact us and we'll handle it manually.
Your rights
- Access & portability — download a copy of your data anytime from Account settings, or by emailing us.
- Rectification — correct your name, email, or photo yourself in Account settings.
- Erasure — delete your account yourself from Account settings, or ask us to.
- Objection & consent withdrawal — change your cookie choice or your weekly digest preference at any time.
- Complaints — you can lodge a complaint with your local data protection supervisory authority.
International transfers
Our servers and the processors we use (Mailjet, PostHog, Hetzner) operate in the EU, so your data generally stays within the EU.
Changes to this policy
If this policy changes materially, we'll update the date above.
Contact
Questions or requests about your data: hello@donzy.app.