Privacy Policy

1. Data we collect

• Account data: name, email, password hash, profile settings.
• Billing data: processed by Paddle. We receive a tokenised customer reference, the last four digits of your card, country, and invoice metadata. We never see or store full card numbers.
• Customer content: stores, products, copy, and media you upload.
• Usage data: IP address, device, browser, pages visited, and feature interactions, used to operate and improve the Service.
• Cookies: strictly necessary cookies for authentication and a small set of first-party analytics cookies set only after your consent.

2. How we use it

• To provide, secure, and improve the Service (legitimate interest).
• To process your subscription and invoices (contract).
• To send service announcements and security alerts (contract / legitimate interest).
• To send marketing emails — only with your consent; you can unsubscribe at any time.
• To comply with legal obligations.

3. Sharing

We share data only with:

• Paddle — payment processing and merchant of record (Paddle Privacy Policy).
• Supabase — managed Postgres, auth, and file storage hosting.
• Cloudflare — edge runtime and CDN.
• Email providers for transactional and authentication emails.
• Authorities, where required by law and after legal review of any request.

4. International transfers

Your data may be processed in countries other than yours. Where required, transfers from the EEA / UK rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

5. Retention

We retain account and content data for as long as your account is active and for 90 days after closure, after which it is deleted or anonymised. Invoice and tax records are retained for the period required by applicable law (typically 6–10 years).

6. Your rights

Subject to local law, you may request access, correction, deletion, portability, or restriction of your personal data, and you may object to certain processing. Email privacy@salsabeel.dev and we will respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority.

7. Security

We use TLS in transit, encryption at rest, least-privilege access controls, audit logging, and regular backups. No system is perfectly secure; if we discover a breach affecting your data we will notify you and the relevant authorities as required.

8. Changes

We will post any updates here and, for material changes, notify you by email at least 30 days before they take effect.

9. Contact

Data controller: Salsabeel Technologies Ltd, 1209 N Orange St, Suite 100, Wilmington, DE 19801, USA. Email privacy@salsabeel.dev.