Privacy Policy

Last Updated: November 29, 2025

1. Introduction

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, website, and applications (collectively, the "Service"). We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

If you do not agree with our policies and practices, please do not use our Service. By accessing and using our Service, you acknowledge that you have read and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

• Contact information (name, email address, phone number, mailing address)
• Account credentials and profile information
• Payment and billing information
• Communications you send us (emails, inquiries, feedback)
• Information provided through forms, surveys, or registrations
• Any other information you choose to share with us

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

• Device information (device type, operating system, browser type)
• Usage data (pages visited, time spent, features used, referral sources)
• Location data (based on IP address, unless you provide precise location)
• Cookies and similar tracking technologies
• Log data (access times, server activity)

2.3 Information from Third Parties

We may receive information about you from:

• Third-party service providers and partners
• Payment processors and financial institutions
• Analytics providers
• Marketing partners
• Public sources and databases

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent: You have explicitly consented to the processing
• Contract: Processing is necessary to perform our services or fulfill your request
• Legal Obligation: We are required by law to process your data
• Vital Interests: Processing is necessary to protect your or others' vital interests
• Public Task: Processing is necessary for a task carried out in the public interest
• Legitimate Interests: We have a legitimate business interest in processing your data

4. How We Use Your Information

We use the personal data we collect for the following purposes:

• Providing, maintaining, and improving our Service
• Processing transactions and sending related information
• Sending transactional emails and service notifications
• Responding to your inquiries and providing customer support
• Personalizing your experience and tailoring content
• Marketing and promotional communications (with your consent)
• Conducting research, analytics, and data aggregation
• Detecting and preventing fraudulent activity and abuse
• Complying with legal obligations and enforcing our agreements
• Protecting our rights, privacy, safety, and property

5. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Specifically:

• Account information is retained for the duration of your account and for a reasonable period thereafter
• Transaction records are retained for legal and accounting purposes (typically 7 years)
• Marketing data is retained until you withdraw consent or unsubscribe
• Log data and analytics information is typically retained for 12 months
• Data collected for legal compliance is retained as required by applicable law

You have the right to request deletion of your data subject to legal retention requirements.

6. Data Sharing and Disclosure

6.1 Third Parties We Share Data With

We may disclose your personal data to:

• Service providers and contractors (payment processors, hosting providers, analytics services)
• Business partners and affiliates
• Law enforcement and regulatory authorities (when required by law)
• Other parties with your explicit consent
• Successors in the event of business transfer, merger, or acquisition

6.2 Data Processing Agreements

All third-party processors have entered into Data Processing Agreements ensuring GDPR compliance and appropriate safeguards for your data.

6.3 International Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards such as Standard Contractual Clauses or your explicit consent.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data that we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten") where applicable
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Rights Related to Automated Decision-Making: Object to automated processing that produces legal or similarly significant effects
• Right to Lodge a Complaint: File a complaint with your supervisory authority

To exercise any of these rights, please contact us using the information provided in Section 11.

8. Data Security

We implement appropriate technical, administrative, and physical safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments and updates
• Limited access to personal data by authorized personnel
• Confidentiality agreements with employees and contractors
• Incident response procedures

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining reasonable safeguards.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Remember your preferences and settings
• Understand how you interact with our Service
• Analyze usage patterns and improve functionality
• Personalize content and recommendations
• Support marketing efforts

Cookie Categories:

• Essential Cookies: Required for core functionality
• Performance Cookies: Collect information about how you use our Service
• Marketing Cookies: Used for marketing purposes (require consent)

You can control cookies through your browser settings. However, disabling certain cookies may affect Service functionality.

10. Children's Privacy

Our Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that a child has provided us personal data, we will take steps to delete such information and terminate the child's account.

For users between 13 and 18 years old, additional parental consent protections may apply.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our privacy practices, please contact us:

Data Controller Information:

Name: [Your Company Name]

Address: [Your Physical Address]

Email: [privacy@yourcompany.com]

Phone: [Your Phone Number]

Data Protection Officer (if applicable):

Email: [dpo@yourcompany.com]

We will respond to your inquiries within 30 days, or as required by applicable law.

12. Supervisory Authority

If you are located in the EEA and have concerns about our privacy practices, you have the right to lodge a complaint with your local supervisory authority:

• European Data Protection Board: https://edpb.eu/
• Your country's data protection authority

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our Service following notification of changes constitutes your acceptance of the updated Privacy Policy.

14. Additional Information for Specific Jurisdictions

GDPR (European Union and EEA)

This Privacy Policy is designed to comply with GDPR requirements including lawful basis, data subject rights, and international transfers.

CCPA (California)

California residents have additional rights including the right to know, delete, and opt-out of the sale of personal information.

Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate.

Version 1.0 | Effective Date: November 29, 2025