Privacy Policy

2. Scope

This Privacy Policy applies to:

• •Our website
• •Web application
• •Mobile applications (if applicable)
• •APIs
• •Customer support
• •Marketing communications
• •Trial and paid subscriptions

It does not apply to third-party services that you access through integrations or external links.

3. Information We Collect

Information You Provide

When you create an account or use the Service, we may collect:

• •Name
• •Email address
• •Company name
• •Profile information
• •Password (stored only as a secure one-way hash)
• •Billing address
• •VAT number (where applicable)
• •Customer support messages
• •Files or content you upload
• •Prompts or inputs submitted to AI features (if applicable)

Information Collected Automatically

When you use the Service, we may automatically collect:

• •IP address
• •Browser type
• •Device type
• •Operating system
• •Screen resolution
• •Language preferences
• •Date and time of access
• •Referring website
• •Pages visited
• •Features used
• •Login history
• •Error reports
• •Performance metrics

Payment Information

Payments are processed by trusted third-party payment providers.

We do not store complete payment card numbers or security codes.

We may receive limited billing information such as:

• •Payment status
• •Subscription plan
• •Transaction identifiers
• •Billing country

4. How We Use Your Information

We process personal information to:

• •Create and manage user accounts
• •Authenticate users
• •Provide the Service
• •Deliver requested features
• •Process subscriptions
• •Send transactional emails
• •Provide customer support
• •Improve performance and reliability
• •Detect fraud and abuse
• •Monitor platform security
• •Comply with legal obligations
• •Respond to lawful requests from authorities

We do not sell your personal information.

5. Legal Basis for Processing (GDPR)

If you are located in the EEA, UK, or Switzerland, we process personal data under one or more of the following legal bases:

Contract

Processing necessary to provide the Service. Examples:

• •Creating accounts
• •Processing subscriptions
• •Delivering requested features

Legitimate Interests

Processing necessary for our legitimate business interests, including:

• •Improving our Service
• •Preventing fraud
• •Detecting abuse
• •Securing our infrastructure
• •Providing customer support

Where required, we balance these interests against your rights.

Consent

We rely on consent where legally required, including for:

• •Optional marketing communications
• •Certain analytics or advertising cookies
• •Other processing where consent is required by law

You may withdraw consent at any time.

Legal Obligations

We may process personal information to comply with:

• •Tax laws
• •Accounting requirements
• •Court orders
• •Regulatory obligations

6. Cookies and Similar Technologies

We use cookies to:

• •Keep you signed in
• •Remember preferences
• •Maintain security
• •Measure website usage (where permitted)
• •Improve user experience

Where required by law, non-essential cookies are used only after you provide consent.

You may manage your cookie preferences through our cookie banner or browser settings, or see our Cookie Policy.

7. Third-Party Service Providers

We use trusted third-party providers to operate our Service. Examples include providers for:

• •Cloud hosting
• •Payment processing
• •Email delivery
• •Customer support
• •Error monitoring
• •Logging
• •Analytics
• •AI services
• •Content delivery
• •Security monitoring

These providers receive only the information necessary to perform their services on our behalf and are contractually required to protect it.

A current list of subprocessors is available on our website.

8. AI Features (If Applicable)

If our Service includes AI functionality:

• •User prompts may be processed by AI service providers.
• •We use AI only to provide requested functionality.
• •AI-generated outputs may be inaccurate or incomplete.
• •Users remain responsible for reviewing AI-generated content before relying on it.

Where applicable, we configure AI providers not to use customer content for training their general models, subject to the provider's available controls and contractual terms.

9. International Data Transfers

Your information may be transferred to countries outside your country of residence.

Where required, we implement appropriate safeguards, including:

• •Standard Contractual Clauses (SCCs)
• •Adequacy decisions
• •Other lawful transfer mechanisms

10. Data Retention

We retain personal information only as long as necessary for the purposes described in this Privacy Policy. Typical retention periods include:

When data is no longer required, we delete or anonymize it where reasonably practicable.

11. Security

We implement reasonable technical and organizational measures to protect personal information, including:

• •HTTPS encryption
• •Encryption in transit
• •Access controls
• •Multi-factor authentication for administrative access where appropriate
• •Security monitoring
• •Regular backups
• •Principle of least privilege
• •Incident response procedures

While we work to protect your information, no method of transmission or storage is completely secure.

12. Your Rights

Depending on your location, you may have the right to:

• •Access your personal information
• •Correct inaccurate information
• •Delete your personal information
• •Restrict processing
• •Object to processing
• •Receive a portable copy of your data
• •Withdraw consent
• •Lodge a complaint with your local supervisory authority

We will respond to applicable requests within the time required by law.

13. Account Deletion

You may request deletion of your account at any time. Following deletion:

• •Access to the Service will end.
• •Personal information will be deleted or anonymized after any applicable retention period.
• •Certain information may be retained where required by law or for legitimate business purposes such as fraud prevention or legal compliance.

14. Marketing Communications

You may receive service-related communications necessary to operate your account.

Marketing emails are sent only where permitted by law.

You may unsubscribe from marketing communications at any time using the unsubscribe link or by contacting us.

15. Children's Privacy

Our Service is not directed to children under the age of 16.

We do not knowingly collect personal information from children.

If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to delete it.

16. Do Not Track

Some web browsers provide "Do Not Track" signals.

Because there is no universally accepted standard for responding to these signals, our Service does not currently respond to them.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Material changes will be communicated through the Service, by email, or on our website where appropriate.

The "Last Updated" date at the top of this document indicates when changes were last made.

18. Contact Us

If you have questions or requests regarding this Privacy Policy or our handling of personal information, please contact us.

19. Additional Information for EEA, UK, and Swiss Users

If you are located in the European Economic Area, the United Kingdom, or Switzerland:

• •We process personal data in accordance with applicable data protection laws, including the GDPR and UK GDPR where applicable.
• •Where we act as a data processor on behalf of business customers, our Data Processing Agreement governs that processing.
• •If required by applicable law, you may contact your local supervisory authority regarding concerns about our processing of your personal data.

20. Contacting Your Data Protection Authority

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the supervisory authority responsible for data protection in your country of residence.

We encourage you to contact us first so we can attempt to resolve your concerns promptly.