Legal

Privacy Policy

We take the protection of your personal and academic data extremely seriously. This Privacy Policy details how we collect, use, and secure your information using state-of-the-art proprietary infrastructure.

1. Data Controller

The data controller responsible for the processing of your personal data under the General Data Protection Regulation (GDPR) is:

HFM Legacy

Represented by: Hans-Ferdinand Maurer

Contact: support@hfmlegacy.com

2. Data Processing & Secure Infrastructure

Uni OS operates on a highly secure, proprietary cloud infrastructure designed specifically to isolate and protect academic records. When you connect your academic accounts, we employ advanced synchronization protocols that act strictly as a proxy, reading data from your institution's servers securely and seamlessly.

Zero-Trust Processing: We do not store your university master passwords in plain text. Authentication tokens are transiently processed by automated systems explicitly designed to prevent unauthorized persistence.
Automated Extraction: We process your timetable, grades, and Moodle documents utilizing robust parsing engines. This is fully automated; no human operator ever reviews your academic files.
Sub-processors: To deliver a globally scalable service, we leverage industry-leading, ISO-certified third-party cloud infrastructure providers located within secure data regions. All sub-processors are bound by strict Data Processing Agreements (DPAs) compliant with EU law.

3. Purpose of Data Collection

We process your data strictly to fulfill our contractual obligations to you (Art. 6(1)(b) GDPR). Specifically, we collect and process:

Identity Data: Names and email addresses to provision your account and securely authenticate your identity.
Academic Data: Timetables, course materials, assignments, and grades to populate your dashboard and provide proactive alerts.
Usage Data: Aggregated, anonymized telemetry strictly utilized to improve our synchronization algorithms and detect security anomalies.

We unequivocally do not sell your personal data to third parties, nor do we monetize your academic records through advertising.

4. Your Rights under GDPR

Under the General Data Protection Regulation, you are guaranteed robust rights concerning your personal information:

Right of Access (Art. 15): You may request confirmation as to whether data concerning you is being processed, and if so, access to the data.
Right to Rectification (Art. 16): You may request the correction of inaccurate personal data.
Right to Erasure (Art. 17): You possess the absolute right to the "Right to be Forgotten". Initiating an account deletion permanently and irreversibly purges your data from our active secure infrastructure.
Right to Restriction of Processing (Art. 18).
Right to Data Portability (Art. 20).

To exercise any of these rights, please contact us directly at support@hfmlegacy.com.

2. Data Processing & Secure Infrastructure

Zero-Trust Processing: We do not store your university master passwords in plain text. Authentication tokens are transiently processed by automated systems explicitly designed to prevent unauthorized persistence.

Automated Extraction: We process your timetable, grades, and Moodle documents utilizing robust parsing engines. This is fully automated; no human operator ever reviews your academic files.

Sub-processors: To deliver a globally scalable service, we leverage industry-leading, ISO-certified third-party cloud infrastructure providers located within secure data regions. All sub-processors are bound by strict Data Processing Agreements (DPAs) compliant with EU law.

3. Purpose of Data Collection

We process your data strictly to fulfill our contractual obligations to you (Art. 6(1)(b) GDPR). Specifically, we collect and process:

Identity Data: Names and email addresses to provision your account and securely authenticate your identity.

Academic Data: Timetables, course materials, assignments, and grades to populate your dashboard and provide proactive alerts.

Usage Data: Aggregated, anonymized telemetry strictly utilized to improve our synchronization algorithms and detect security anomalies.

We unequivocally do not sell your personal data to third parties, nor do we monetize your academic records through advertising.

4. Your Rights under GDPR

Under the General Data Protection Regulation, you are guaranteed robust rights concerning your personal information:

Right of Access (Art. 15): You may request confirmation as to whether data concerning you is being processed, and if so, access to the data.

Right to Rectification (Art. 16): You may request the correction of inaccurate personal data.

Right to Erasure (Art. 17): You possess the absolute right to the "Right to be Forgotten". Initiating an account deletion permanently and irreversibly purges your data from our active secure infrastructure.

Right to Restriction of Processing (Art. 18).

Right to Data Portability (Art. 20).

To exercise any of these rights, please contact us directly at support@hfmlegacy.com.