Privacy Policy
Last updated: January 26, 2025
1. Data Controller
The data controller responsible for your personal data is:
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name (if provided)
- Password (stored in hashed form)
2.2 Payment Information
When you subscribe to a paid plan, payment processing is handled by Stripe. We store:
- Stripe customer ID
- Subscription status and plan details
- Billing history (invoice references)
We do not store your complete credit card number. All payment data is processed and stored securely by Stripe in accordance with PCI DSS standards.
2.3 Service Usage Data
We collect data about how you use our Service:
- Domains you add and configure
- Banner configurations and settings
- Cookie scan results
- Consent logs from your website visitors
- Analytics data (consent rates, visitor statistics)
2.4 Technical Data
We automatically collect certain technical information:
- IP address
- Browser type and version
- Device information
- Access timestamps
3. How We Use Your Information
We use the collected information to:
- Provide and maintain our Service
- Process your payments and manage subscriptions
- Send you service-related communications
- Provide customer support
- Analyze and improve our Service
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Legal Basis for Processing
Under GDPR, we process your personal data based on:
- Contract: Processing necessary to provide our Service to you
- Legitimate interests: Improving our Service, preventing fraud
- Legal obligation: Compliance with applicable laws
- Consent: Where you have given explicit consent
5. Third-Party Services
We use the following third-party services that may process your data:
Stripe (Payment Processing)
Stripe processes payments on our behalf. Their privacy policy is available at stripe.com/privacy
6. Cookies
Our Service uses cookies and similar technologies to:
- Maintain your logged-in session
- Remember your preferences
- Analyze how you use our Service
You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use certain features of our Service.
7. Data Retention
We retain your personal data for as long as:
- Your account is active
- Required to provide you with our Service
- Necessary to comply with our legal obligations
- Required to resolve disputes or enforce agreements
Consent logs from your website visitors are stored for up to 5 years to comply with GDPR audit requirements.
8. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Right to access: Request a copy of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Request limitation of processing
- Right to data portability: Receive your data in a machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time
To exercise these rights, contact us at [email protected]. We will respond to your request within 30 days.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure password hashing
- Regular security assessments
- Access controls and authentication
10. International Transfers
Your data may be processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our Service. The "Last updated" date at the top of this policy indicates when it was last revised.
12. Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is:
13. Contact Us
If you have any questions about this Privacy Policy, please contact us at: