1. Who is responsible
Mikhail Gorobets, operating as Grenzwert, is responsible for personal data processed to operate the Grenzwert website, accounts, viewer access, and support. Contact us at [email protected].
Paddle acts as Merchant of Record and is independently responsible for personal data it processes to complete payments, calculate taxes, prevent fraud, handle returns, and meet its legal obligations.
2. Scope
This Privacy Policy applies when you visit grenzwert.net, create or manage an account, use the Free viewer or a paid subscription plan, purchase or manage a subscription, submit a plan-interest form, or contact support.
It does not replace the privacy notices of third-party services that you choose to use or the terms of a separately contracted Enterprise deployment.
3. Data we process
Account and authentication data
Clerk processes your user identifier, name, email addresses, profile image, connected sign-in accounts, authentication factors, session information, and security events. Grenzwert uses your Clerk user identifier to associate the account with viewer access.
Subscription and transaction data
Paddle processes checkout details such as your name, email, billing address, payment method, transaction, tax, and fraud-prevention information. Grenzwert does not receive full card details. We receive and store the Paddle customer and subscription identifiers, plan, billing interval, subscription status, current period end, cancellation state, and related event timestamps.
Forms and communications
If you submit a plan-interest form or contact us, we process the information you provide, which may include email, role, organization, desired license count, feature interests, message content, and support correspondence.
Technical data
Cloudflare and other infrastructure providers may process IP address, request metadata, browser and device information, approximate location derived from the network, security signals, and operational logs needed to deliver and protect the service.
4. DICOM and health data
During normal viewer use, supported DICOM studies are opened and processed locally on your device. Grenzwert does not intentionally upload, receive, or store the DICOM study content or patient information contained in it.
Do not send identifiable patient information, DICOM files, or sensitive health data through a plan-interest form, ordinary email, or support request. If troubleshooting requires sample data, contact us first and use only properly de-identified material agreed for that purpose.
5. Purposes and legal bases
Depending on applicable law, we process personal data:
- to provide accounts, paid access, subscriptions, and support under our contract with you;
- to secure, troubleshoot, maintain, and improve Grenzwert based on our legitimate interests in operating a reliable service;
- to respond to plan interest and other requests you initiate;
- to prevent fraud, abuse, and unauthorized access;
- to keep records and comply with tax, accounting, consumer-protection, and other legal duties;
- with consent where applicable law requires consent, which you may withdraw for future processing.
6. Service providers and disclosures
We disclose only the data reasonably needed for the service to:
- Clerk, for authentication and account management;
- Paddle, for Checkout, subscriptions, taxes, fraud prevention, and payment support;
- Cloudflare, for hosting, network delivery, logs, and security;
- Formspree, when you submit the optional plan-interest form;
- YouTube/Google, when you load or interact with an optional embedded video.
We may also disclose data when required by law, to protect users or the service, in connection with a business reorganization, or with your direction. We do not sell personal data or share it for cross-context behavioral advertising.
7. Cookies and browser storage
Grenzwert and its providers use cookies or similar browser storage that are necessary for authentication, account security, Checkout, subscription management, language or session continuity, and embedded content. The account page may temporarily store a profile-image reference in session storage and removes it when the session ends or the user signs out.
We do not currently operate our own advertising cookies or audience-analytics service. A privacy-enhanced YouTube embed is used, but YouTube may store or read information when you interact with the video. Blocking essential storage may prevent account or payment features from working.
8. International transfers
Grenzwert and its providers may process data in countries other than the one where you live. Where required, providers use recognized transfer mechanisms and contractual safeguards. Their privacy notices describe their locations and transfer practices in more detail.
9. Retention
We retain account and entitlement records while your account or subscription is active and afterward only as reasonably needed to resolve billing, security, support, legal, or accounting matters. Requests and plan-interest submissions are kept while they remain relevant to the conversation or until you ask us to delete them, unless continued retention is legally required.
Infrastructure logs and data controlled independently by Clerk, Paddle, Cloudflare, Formspree, or YouTube follow the retention rules stated by those providers. When data is no longer needed, we delete or anonymize it where reasonably possible.
10. Security
We use reasonable technical and organizational measures such as encrypted transport, authenticated access, origin checks, webhook signature verification, restricted database access, and security services supplied by our providers. No online system can be guaranteed completely secure.
You are responsible for securing your account credentials and device and for avoiding patient data in support communications.
11. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal data, receive a portable copy, withdraw consent, or complain to a data-protection authority. You may also manage some account information directly through Clerk.
Send a request from the email associated with your account to [email protected]. We may need to verify your identity and may retain information where law requires it. For Paddle-controlled payment data, contact Paddle through your receipt, Customer Portal, or Paddle.net.
12. Children
Grenzwert is not directed to children and accounts are limited to people aged 18 or older. If you believe a child has provided personal data, contact us so that we can investigate and delete it where appropriate.
13. Changes and contact
We may update this Policy when our services, providers, or legal obligations change. The effective date above identifies the current version. Material changes will be highlighted through the website, account area, or email where reasonably appropriate.
For privacy questions or requests, contact [email protected].