Privacy Policy

Introduction

This Privacy Policy describes how personal data is collected, used, and protected across all service channels. It applies whenever you interact with the service, whether via web, mobile, or API. Your use of the service indicates acceptance of these practices. Updates may be made without explicit notice, so please check back regularly.

Data Collection Methods

We collect personal data through user inputs (e.g., registration forms, feedback surveys) and automatically via system logs (e.g., IP addresses, device type, usage patterns). Only non-sensitive information is gathered, such as email, username, and performance metrics. Sensitive data categories (health, financial, biometric) are never requested. All collection points provide clear context and purpose.

Purpose & Legal Basis

Personal data is processed to authenticate users, secure accounts, and deliver customer support. Aggregate, anonymized metrics guide performance optimizations and new features. Processing is based on contractual necessity for service delivery and legitimate interests for security. Consent is required for optional features such as personalized recommendations and advanced analytics.

Cookies & Similar Technologies

Essential cookies are used for maintaining sessions and security tokens. Non-essential analytics cookies remain inactive until you enable them explicitly. Third-party tracking cookies are never installed without separate consent. Cookie controls are available in your browser settings or account dashboard.

Security Measures

All data in transit is secured by encryption (e.g., HTTPS/TLS). Data at rest resides in encrypted databases with strict access controls. Multi-factor authentication and least-privilege principles limit internal data access. Regular security audits and vulnerability scans ensure ongoing protection against new threats.

User Control & Access

You can access, correct, or request deletion of your personal data at any time via the support portal or account settings. Requests are handled within thirty days, subject to legal requirements. If deletion is requested, data essential for compliance or dispute resolution may be retained in anonymized form. You may also withdraw previously granted consent at any time for optional processing.

Data Retention

Personal data is retained only as long as necessary to fulfill the purpose for which it was collected, typically not exceeding eighteen months from last user activity. Archived backups are purged within ninety days after the retention period expires. Anonymized datasets may be retained indefinitely for research and analytics. Detailed retention schedules are available upon request.

Breach Notification

In case of a confirmed data breach, notifications will be sent to affected parties within seventy-two hours of breach confirmation. Notifications will include breach details, data categories involved, and protective steps. Regulatory authorities will be informed according to applicable laws. Post-incident reviews inform process improvements and risk mitigation.

Automated Decision-Making

Some processes may involve automated analysis of anonymized data for fraud detection or resource allocation. If an automated decision materially affects your account, you will be notified and given the opportunity for human review. Optional personalization features require your explicit opt-in. All algorithmic logic is documented and available for auditing.

Third-Party Sharing

Data is shared only with essential third-party providers under strict data protection agreements (e.g., hosting, payment processing, email delivery). No personal data is shared with advertisers or data brokers. Each third party is regularly audited for compliance with our privacy standards. All data transfers are logged and auditable upon request.

Policy Revision

This policy is reviewed at least annually or when significant changes in operations or law occur. Material updates are communicated via email and in‌service notifications at least fourteen days before taking effect. Continued use after the effective date indicates acceptance of revised terms. Archived versions remain accessible for full transparency.