Last updated: 8 May 2026
Privacy Policy
SecBerg GmbH ("SecBerg", "we", "us") operates TARA Workbench. This Privacy Policy explains what data we collect, why we collect it, and your rights under GDPR and applicable data-protection law.
1. Data we collect
We collect the information you give us when you sign up (name, work email, company name, role), data you input into the workbench (vehicle program artifacts, user actions), session data (browser, IP, timestamps), and payment data processed by our payment provider. We do not collect personal data from the vehicles or ECUs themselves.
2. How we use your data
We use your data to provide and improve the TARA Workbench service, to send you product updates you've opted into, to comply with legal obligations (including ISO 21434 audit trail requirements), and to communicate with you about your account or support requests.
3. Tenant isolation
Every query is filtered by a JWT-bound tenant ID. There are no cross-tenant joins in the codebase. Your TARA artifacts never leave your tenant and are never used to train models or benchmarks.
4. Data retention
We retain your data for the duration of your active subscription plus a 90-day wind-down period. After that, data is deleted from all primary and backup systems within 30 days unless you request earlier deletion or we are required to retain it by law.
5. Sub-processors
We use a small set of sub-processors to run the service: AWS (hosting — EU Frankfurt or US Virginia, your choice), Stripe (payments), Cloudflare (CDN + DDoS), and PostHog (analytics, cookieless). The full list is maintained on our security page.
6. Your rights
Under GDPR you have the right to access, correct, delete, or export your personal data at any time. To exercise these rights, email privacy@secberg.com. We respond within 72 hours.
7. Data Processing Agreement
If you are an EU-based controller processing personal data through the workbench, we will enter into a DPA with you on request. The DPA incorporates the EU Standard Contractual Clauses. Contact legal@secberg.com.
8. Changes to this policy
We will notify you by email at least 30 days before any material change to this policy. Your continued use of the workbench after the effective date constitutes acceptance.
9. Contact
SecBerg GmbH · Friedrichstraße 100 · 10117 Berlin · Germany · privacy@secberg.com