Privacy Policy

Definitions

Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data under the following legal bases:

• Contract: To provide our service and fulfill our obligations when you create an account or use Palettra.
• Consent: When you give consent, for example to receive marketing emails.
• Legitimate Interests: To improve our services, prevent fraud, or run analytics, provided your rights are not overridden.
• Legal Obligation: When required to comply with applicable laws.

Information We Collect

Personal Information

While using our service, we may ask you to provide certain personally identifiable information, including:

• Email address
• First name and last name
• Usage data

Usage Data

Usage data is collected automatically and may include your device's IP address, browser type, browser version, the pages you visit, the time and date of your visit, time spent on pages, and other diagnostic data.

How We Use Your Information

We use your personal data for the following purposes:

• To provide and maintain our service, including monitoring usage and improving functionality
• To manage your account and provide access to different functionalities
• To contact you with updates, security notices, and service-related communications
• To analyze and improve our service, products, and user experience

Third-Party Services

We may share your personal information with trusted service providers:

• Hosting: Vercel - Privacy Policy
• Analytics: Google Analytics - Privacy Policy
• Payments: Stripe (future use) - Privacy Policy

Cookies & Tracking

We currently use cookies for authentication and essential functionality. In the future, we may also use cookies and similar technologies for analytics and advertising purposes. These may include third-party cookies such as Google Analytics or advertising partners.

Data Security

The security of your personal data is important to us. While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable measures to protect your information.

Data Retention

We retain your personal data for no longer than 12 days after you delete your account, unless a longer retention period is required by law or necessary to resolve disputes. Usage data may be retained for analytics and internal purposes for the same period, unless legally required otherwise.

Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal obligations.
• Restriction: Ask us to limit how we process your data.
• Portability: Request your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interests or direct marketing.
• California Residents (CCPA/CPRA): You have the right to know what categories of data we collect, request deletion, and opt out of “sale” or “sharing.” We do not sell personal information.

Children's Privacy

Our service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.