Privacy Policy

1. Information we collect

We collect information you provide directly — name, email, password (stored as a one-way hash), shipping and billing address, and order history. When you visit the site we also collect device information, IP address, browser type, and pages viewed.

• Account data — first name, last name, email, password hash.
• Order data — credit purchases, plan length, payment method, invoice records.
• Technical data — IP, user agent, referrer, locale, cookies.
• Support data — messages you send through the contact form.

2. How we use information

We process personal data to operate your account, fulfil orders, send transactional communications (order confirmation, bank transfer details, password recovery), prevent fraud, comply with legal obligations, and improve our products and services. We do not sell personal data.

3. Legal bases (GDPR)

• Contract — to create your account and deliver credits you purchased.
• Legitimate interest — site security, fraud prevention, product analytics.
• Consent — non-essential cookies and any marketing emails you opt into.
• Legal obligation — tax, accounting, and anti-money-laundering records.

4. Sharing

We share data only with vetted processors acting on our behalf: hosting and infrastructure providers, payment institutions for bank transfer reconciliation, email delivery providers, and our accountants. Each processor is bound by a written data processing agreement.

5. Retention

Account data is retained while your account remains active. Order and invoice records are kept for the period required by applicable tax law (typically 7–10 years). Support tickets are retained for up to 24 months.

6. Your rights

Subject to local law, you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. You may also withdraw consent at any time. Submit requests through the contact page; we respond within 30 days.

7. International transfers

Where personal data is transferred outside your jurisdiction, we rely on Standard Contractual Clauses or equivalent safeguards approved by the relevant supervisory authority.

8. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, hashed passwords, least-privilege access, and audit logging. No method of transmission is completely secure; we cannot guarantee absolute security.

9. Children

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe a minor has provided personal data, contact us and we will delete it.

10. Changes

We may update this policy from time to time. Material changes are announced on this page with a new “Last updated” date.