Imprint, privacy and terms

Service provider and media owner

Company

Rightstuff Innovations GmbH

Registered office

Trenkwaldgasse 43, 1170 Vienna, Austria

Managing director

Gian Luca Scheper

Email

[email protected]

Business purpose

Development and operation of software (software as a service)

Editorial line

Information about Backbone and topics around invoicing and bookkeeping

Register and trade licence

Company register

FN 622258 k, Commercial Court of Vienna

VAT ID

ATU80468557

Trade licence

Services in automatic data processing and information technology

Chamber

Vienna Economic Chamber (WKO), UBIT group

Regulations

Austrian Trade Regulation Act 1994, available at www.ris.bka.gv.at

Trade authority

Magistrate of the City of Vienna

Controller

The controller is Rightstuff Innovations GmbH, Trenkwaldgasse 43, 1170 Vienna, Austria. Send privacy questions to [email protected].

Data, purposes and legal bases

• Visiting the website: IP address, time, page and browser, to run the site securely (Art. 6(1)(f) GDPR).
• Account: name, email address, password (hashed only), workspace and role, to perform the contract (Art. 6(1)(b)). No account without an email address.
• Your business data: clients, time, invoices, receipts and bank statements. Third-party data in it we process on your behalf (terms § 10).
• Payments: you enter card details only at Stripe. We receive plan, status and billing data (Art. 6(1)(b) and (c)).
• AI features: what you give an AI feature goes to Anthropic and is not used for training. The AI suggests; you decide.
• Error data: technical details about errors via Sentry (Art. 6(1)(f)).
• Statistics: Google Analytics only with consent in the cookie banner (Art. 6(1)(a)), IP shortened; withdraw via “Cookie settings” in the footer.

Cookies

We set necessary cookies (sign-in, language, your cookie choice) without consent (§ 165(3) TKG 2021) and all others only with your consent.

Recipients

Only these processors receive data, as far as they need it. Transfers to the US rely on the EU-US Data Privacy Framework (DPF) or Standard Contractual Clauses (SCC).

Retention

• Account and business data: until you delete them or the contract ends
• Our invoices to you: 7 years (§ 132 BAO, Art. 6(1)(c) GDPR)
• Server logs: until the hosting provider deletes them automatically

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) and may withdraw consent at any time. An email is enough.

You can complain to the Austrian Data Protection Authority (dsb.gv.at) or the supervisory authority of your country.

§ 1 Scope

These terms apply to contracts for Backbone with Rightstuff Innovations GmbH (“we”). Backbone is for businesses only (§ 1 UGB, § 14 BGB); there is no consumer right of withdrawal. Different terms of the customer do not apply.

§ 2 Service

Backbone is a web app for time tracking, invoices, payment reminders, receipts and bookkeeping exports, in its current version. AI results are suggestions you check. Backbone is not tax or legal advice.

§ 3 Trial, prices, payment

The trial lasts 7 days and needs a payment method. Unless you cancel before it ends, the chosen plan starts.

The prices on the pricing page at the time of order apply, billed in advance through Stripe. If payment is late, we may block access after notice.

§ 4 Term and cancellation

The subscription renews for the chosen period. Either side can cancel to the end of the period, you directly in the app. Termination for good cause remains possible.

§ 5 Your duties and data

Keep your sign-in details secret and only upload content you may process. Your data stays yours; you can export it at any time. Retention duties for your records (Austria 7, Germany 8 years) remain with you.

§ 6 Availability

We aim for high availability but do not owe uninterrupted operation. Maintenance can cause short interruptions.

§ 7 Liability

We are liable without limit for intent, gross negligence, personal injury and under the Product Liability Act. For slight negligence only for breach of essential duties and limited to the foreseeable, typical damage; lost profit is excluded. For data loss we are liable only up to the cost of restoring from a backup.

§ 8 Changes

We announce changes to these terms by email six weeks in advance. If you do not object, they apply; we point this out. If you object, either side may cancel.

§ 9 Law and venue

Austrian law applies, excluding the UN Sales Convention. The place of jurisdiction is Vienna. If a clause is invalid, the rest stays valid.

§ 10 Data processing (Art. 28 GDPR)

Where we process personal data on your behalf, you are the controller and we are the processor:

• Subject and duration: running Backbone for the term of the contract.
• Data and data subjects: contact, invoice, time, receipt and bank data of your users, clients, suppliers and partners.
• Instructions: we process only on your instructions; your use of the app is the instruction.
• Confidentiality: everyone with access is bound to confidentiality.
• Security (Art. 32): encryption in transit and at rest, separate workspaces, roles, backups.
• Sub-processors: you approve those listed under Recipients. We announce changes in advance; you may object.
• Assistance: we help with data subject requests and Art. 32–36 GDPR and report data breaches without delay.
• End of contract: you can export your data; afterwards we delete it.
• Evidence: we provide the necessary information and allow audits with notice.