Legal

Privacy Policy

Last updated: August 9, 2026

Macca Design d.o.o., which operates Templet, is the controller of the personal data described here. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have. We aim to collect only what we need to run the Service.

1. Information we collect

  • Account data — your email address and authentication details;
  • Workspace & content data — the templates, documents, client details, logos, and branding you create or upload;
  • Billing data — handled by Paddle; we receive limited details such as plan, country, and subscription status, but not full card numbers;
  • Usage data — basic technical and product-usage information used to operate and improve the Service. On our public website this includes Google Analytics, which we load only if you accept analytics cookies;
  • Consent data — a record of the cookie choice you made, when you made it, and the country it was made from, kept as evidence that we asked;
  • Crash reports — when something goes wrong in the app we receive a technical error report. It carries the fault and your account ID so we can tell whether one person or everyone is affected; it is stripped of your templates, documents, and client details before it is sent.

2. How we use your data

We use your data to provide, secure, and improve the Service, including to:

  • Authenticate you and keep your account secure;
  • Store and render your templates and generate your documents;
  • Process subscriptions and send transactional emails;
  • Provide support and communicate important changes.

We do not sell your personal data.

3. Service providers

We share data only with providers that help us run the Service, under appropriate agreements:

  • Supabase — database and authentication, hosted in the EU (Frankfurt);
  • Vercel — hosting and delivery of the website and the app;
  • Amazon Web Services — the server that renders your PDFs and sends your documents;
  • Paddle — payment processing and merchant-of-record services;
  • Resend — delivery of transactional and account emails;
  • Anthropic — AI processing, when you use an AI feature (see below);
  • Google — Analytics on our public website, only if you accept analytics cookies;
  • Sentry — crash reports when something in Templet goes wrong, hosted in the EU;
  • GitHub — storage of our encrypted database backups.

When you use an AI feature — generating a template, importing a PDF, or asking the assistant to edit a template — the content involved is sent to Anthropic to produce the result and returned to you. This happens only when you start such an action; we do not send your templates or documents to any AI provider in the background. Anthropic processes it on our behalf under its commercial terms and does not use it to train its models. AI features are available on paid plans; see section 5 of the Terms of Service.

4. Where your data is processed

Your account, templates, documents, and client details are stored in the European Union — our database and authentication run on Supabase in Frankfurt, Germany.

Some processing happens outside the EU, in the United States. In particular, the server that renders your PDFs and sends your documents to clients runs in Amazon Web Services’ US East region, so a document is processed there at the moment you generate or send it. Vercel, Paddle, Resend, Anthropic, Google, and GitHub likewise operate from or through the United States.

5. Data retention

We keep your data for as long as your account is active. After you cancel, we retain data for a reasonable period to comply with legal obligations and then delete or anonymise it. You can request deletion at any time.

6. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us at support@templet.app. We aim to respond within one month, as required under the GDPR.

If you are in the EU and believe we have handled your data improperly, you also have the right to complain to your local data-protection authority. In Croatia, where we are established, that is the Croatian Personal Data Protection Agency (AZOP).

7. Cookies

We use essential cookies to keep you signed in and to remember your workspace, your theme, and the cookie choice you made. On our public website we also use Google Analytics, which sets analytics cookies — but only after you accept them. You can decline, or change your mind later, from the Cookie Policy, which lists every cookie we set. We do not use advertising cookies and we do not sell your data.

8. Changes to this policy

We may update this policy and will revise the “Last updated” date above when we do. Material changes will be communicated to you.

Questions? Contact us at support@templet.app.

Macca Design d.o.o. — Zagrebačka cesta 226, 10000 Zagreb, Croatia. OIB 49919961583 · MBS 05822246 · registered at the Commercial Court in Zagreb · share capital €2,500 · director Karlo Biščan.