BadMars — Data Portability & Switching

BadMars is a data-processing service (Software-as-a-Service) within the meaning of the EU Data Act (Regulation (EU) 2023/2854). This page is the online register and switching information the Data Act requires (Art. 25–26, 28). It complements the “Data export and switching” section of the Terms of Service.

1. Export your data (self-serve)

You can download your data at any time from Account → Data rights → Download my data, or directly at GET /account/export. The export is a single JSON file (badmars-export.json) covering your own Payloads, Reports and Debriefs. Anonymous coded pattern records are not personal data and are not part of the export.

2. Data structures & formats (Art. 26 register)

The export format is badmars.account-export.v1. Its structure:

{
  "export": {
    "format": "badmars.account-export.v1",
    "generated_at": "ISO-8601 timestamp",
    "notice": "human-readable scope note"
  },
  "account": {
    "email": "string",
    "created_at": "ISO-8601 timestamp | null"
  },
  "missions": [
    {
      "id": "string (public mission id)",
      "type": "string (mission type)",
      "score": "integer (0–100)",
      "status": "string (mission status)",
      "created_at": "ISO-8601 timestamp | null",
      "payload": "string | null (the plan/decision text you submitted)",
      "report": "object | null (the filed report body: verdict + findings)",
      "debrief": [
        { "role": "user | panel", "content": "string" }
      ]
    }
  ]
}

• Encoding: UTF-8 JSON. Character set: Unicode. Media type: application/json.
• Versioning: the export.format string carries the schema version; a backward-incompatible change increments it (…v2) and this register is updated in the same change.
• No proprietary format, licence, or tool is required to read the export.

3. Switching to another provider (Art. 25)

You may switch to another provider, or to your own on-premises solution, and retrieve your exportable data and digital assets:

• Exportable data — the data you provided (Payloads) and generated with the service (Outputs / Reports, Debriefs), in the format in §2.
• Initiation — you may start switching on notice of no more than two months.
• Transition — we complete the switch within a maximum of 30 calendar days after the notice period, extended only where the switch is technically unfeasible in that time, in which case we tell you the justified longer period.
• Retrieval window — after termination or the transition you have at least 30 days to retrieve your exportable data before we delete it, subject to the limited legal retention exceptions in the Privacy Policy and the DPA.
• No switching charges — we do not charge for switching.

Procedure: export your data with §1 at any time; to give switching notice or ask for transition assistance, email [email protected] or use the contact route.

4. Infrastructure jurisdiction & governmental access (Art. 28)

• Processing location. Your data is processed and stored in the European Union (Hetzner, Germany).
• Sub-processors. The recipients, their locations, and the transfer mechanism for any processing outside the EEA are in the Sub-processor List.
• Third-country / governmental access. We apply technical, organisational and contractual measures to prevent international or third-country governmental access to, or transfer of, non-personal data where that would conflict with EU or Member State law. Where a lawful, binding request is received, we act only to the extent legally required and, where permitted, inform the affected customer.