Privacy Statement

Last updated: July 2026 — Myosotis IT Services

1. Who are we?

Iterr (iterr.eu and app.iterr.eu) is a service of Myosotis IT Services, based in the Netherlands. For privacy questions: use the contact form or email privacy [at] iterr.eu.

2. What data do we process?

• Waitlist and contact: name, email address and (optionally) your role, when you fill in a form on iterr.eu.
• Account data: name and email address when registering on app.iterr.eu.
• Usage data: teams, sprints and the input in modules (such as mood votes, confidence votes, ROTI scores, retro items and actions) — necessary for the service. Individual mood votes are displayed in aggregated form.
• IP address: solely for rate limiting and security.
• Payment data: once paid subscriptions become available, payments are processed by Stripe. We do not store card details ourselves.

3. Legal basis for processing

• Performance of a contract — providing the Iterr service you signed up for.
• Consent — the waitlist and product updates by email (at most one message per month; you can unsubscribe at any time).
• Legitimate interest — security and fraud prevention (IP logging, rate limiting).

4. Processors

• Hosting provider — Dutch hosting, servers within the EU.
• Mail server — transactional email (verification, password reset, waitlist updates).
• Stripe — payment processing (once applicable).

We conclude a data processing agreement with all processors.

5. Cookies

Iterr.eu does not use tracking, analytics or marketing cookies. Only functional cookies are set:

Under the GDPR, no consent is required for functional cookies, as they are strictly necessary for the requested service. That is why no cookie banner appears. Should analytical cookies be added in the future, this statement will be updated and a GDPR-compliant consent banner will appear.

6. Retention periods

• Waitlist data: until you unsubscribe.
• Account data: until deletion of your account + 1 year.
• Payment data: 7 years (statutory fiscal retention obligation).

7. Data location

Your data is stored on servers within the European Union (Dutch hosting). No transfer outside the EEA takes place, unless explicitly stated for a processor.

8. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact us via the contact form or at privacy [at] iterr.eu. We respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Changes

We may amend this statement. Substantial changes will be communicated by email or a notice on the website.