Privacy Policy

Last updated: January 2025

1. Introduction

Welcome to Cover ("we", "us", or "our"). Cover is an invoicing application designed for yoga teachers to manage their classes, studios, and invoices efficiently.

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service at cover.yoga.

Contact Information:

  • Email: hello@cover.yoga

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

  • Your name
  • Email address
  • Password (stored securely using industry-standard hashing)

2.2 Professional Information

To provide our invoicing service, we collect:

  • Your business name and address
  • Bank account details (IBAN, BIC) for invoice generation
  • Tax identification numbers (if applicable)

2.3 Yoga Class Data

To generate invoices, we store:

  • Studio information (names, addresses, contact details)
  • Class schedules and rates
  • Generated invoices and their status

2.4 Usage Analytics

With your consent, we collect anonymized usage data through Mixpanel to improve our service:

  • Pages visited
  • Features used
  • General usage patterns

This data is only collected if you accept analytics cookies through our consent banner.

3. How We Use Your Data

We use your personal data to:

  • Provide our service: Create and manage your account, store your studio and class information, generate PDF invoices
  • Communicate with you: Send important service updates, respond to support requests
  • Improve our service: With your consent, analyze usage patterns to enhance features and user experience
  • Ensure security: Protect against fraud and unauthorized access
  • Comply with legal obligations: Meet tax and accounting requirements

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

  • Contract performance: Processing necessary to provide the invoicing service you signed up for (Article 6(1)(b))
  • Legitimate interests: Security measures and fraud prevention (Article 6(1)(f))
  • Consent: Analytics cookies and marketing communications, which you can withdraw at any time (Article 6(1)(a))
  • Legal obligation: Retention of invoice data for tax compliance (Article 6(1)(c))

5. Data Storage and Security

5.1 Where We Store Your Data

Your data is stored on servers located in the European Union:

  • Application hosting: Vercel (EU region)
  • Database: AWS (EU region)
  • Analytics: Mixpanel (EU endpoint)

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your data:

  • Encryption in transit (TLS/HTTPS)
  • Encryption at rest for sensitive data
  • Regular security updates and monitoring
  • Access controls and authentication

6. Data Sharing

We share your data only with trusted third-party service providers necessary to operate our service:

  • Vercel — Application hosting — Application data
  • AWS — Database storage — All stored data
  • SendGrid — Email delivery — Email address, name
  • Mixpanel — Analytics (with consent) — Anonymized usage data

We never sell your personal data to third parties.

All our service providers are bound by data processing agreements and comply with GDPR requirements.

7. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

7.1 Right of Access

You can request a copy of all personal data we hold about you.

7.2 Right to Rectification

You can update or correct inaccurate personal data through your account settings or by contacting us.

7.3 Right to Erasure

You can request deletion of your account and associated data. Note that we may need to retain certain data for legal compliance (see Section 9).

7.4 Right to Data Portability

You can request your data in a structured, commonly used format (JSON or CSV).

7.5 Right to Withdraw Consent

You can withdraw consent for analytics cookies at any time through the consent banner or by clearing your cookies.

7.6 Right to Object

You can object to processing based on legitimate interests.

7.7 Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at hello@cover.yoga.

8. Cookies

8.1 Essential Cookies

We use essential cookies for:

  • Session management
  • Security features
  • Remembering your cookie preferences

These cookies are necessary for the service to function and cannot be disabled.

8.2 Analytics Cookies

With your consent, we use Mixpanel to collect anonymized usage data. You can manage your preferences through the cookie consent banner that appears when you first visit our site.

You can change your cookie preferences at any time by clearing your browser cookies, which will prompt the consent banner to appear again.

9. Data Retention

We retain your data for the following periods:

  • Account data — Until account deletion — Service provision
  • Invoice data — 10 years after creation — Legal/tax requirements
  • Analytics data — 2 years — Service improvement
  • Support communications — 3 years — Customer service

When you delete your account:

  • Your profile and studio data are deleted immediately
  • Invoice data is anonymized but retained for legal compliance
  • Analytics data is deleted within 30 days

10. Updates to This Policy

We may update this Privacy Policy from time to time. When we make significant changes:

  • We will update the "Last updated" date at the top of this page
  • For material changes, we will notify you via email or through a prominent notice on our service

We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: hello@cover.yoga

We aim to respond to all privacy-related inquiries within 30 days.

This Privacy Policy is effective as of January 2025.

Privacy Policy | Cover