Privacy Policy
Last updated: 25 June 2026. This policy explains what we collect, why, and your rights under the UK GDPR and EU GDPR.
Who is the data controller
Maxedlabs Ltd (trading as Feedlark), a company registered in England and Wales, is the controller of personal data described here. Contact: hello@feedlark.com.
What we collect
- Account data — admin name, email and a securely hashed password.
- Billing data — handled by Stripe; we store your Stripe customer/subscription identifiers and plan, not your card number.
- Feedback content — posts, votes and comments submitted to boards, plus any name or email a contributor chooses to share.
- Voter identifier — an anonymous cookie id so one person can't vote twice; no account needed.
- Technical data — IP address and request metadata used for security, abuse prevention and rate limiting, and diagnostic error reports.
Why we use it (lawful bases)
- To provide the service (performance of a contract) — accounts, boards, roadmaps, billing.
- Legitimate interests — keeping the service secure, preventing abuse/spam, and improving the product.
- Consent — sending you "your request shipped" update emails when you opt in by leaving an email; you can unsubscribe at any time from any such email.
- Legal obligation — keeping billing and tax records.
Processors we use
We don't sell your data. We share it only with the providers that run Feedlark, each under data-processing terms:
- Vercel — application hosting and content delivery.
- Turso — database hosting.
- Stripe — payment processing.
- Resend — transactional and notification email.
Some providers process data outside the UK/EEA; where they do, transfers are covered by appropriate safeguards such as Standard Contractual Clauses. Public board, roadmap and changelog content is publicly visible by design.
How long we keep it
We keep account and feedback data for as long as your account is active and for a reasonable period afterwards. Billing records are retained as long as required by law (typically up to six years in the UK). We delete or anonymise data when it is no longer needed, or sooner on a valid request.
Your rights
You have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. Admins can edit or delete board content and close their account in-app. To exercise any right, email hello@feedlark.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local supervisory authority.
Cookies
We use only the cookies needed to run the service: a session cookie for signed-in admins, an active-workspace preference, and an anonymous voter id that prevents double-voting. We don't use advertising or cross-site tracking cookies. See our cookie notice for details.
Children
Feedlark isn't intended for anyone under 16, and we don't knowingly collect their data.
Changes and contact
We'll post any changes here and update the date above. Questions or requests: hello@feedlark.com.
This is a good-faith policy written for Feedlark's actual data practices. We recommend a legal review against your registered entity before relying on it.