Privacy policy

1. Introduction

At StringScales, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you access or use our platform. By using StringScales, you agree to the practices described in this policy.

2. Data Controller

StringScales is owned and operated by Indicode BV, a company registered in Belgium. For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, we are the data controller of your personal data.

3. Data We Collect

We may collect and process the following types of personal data:

• Information you provide directly:
  • Account details (e.g., name, email address, password).
  • Payment information for subscriptions (processed by third-party payment processors).
• Automatically collected data:
  • Log information (e.g., IP address, browser type, access times).
  • Usage data (e.g., pages visited, time spent on the platform).
  • Cookies and tracking technologies (see our Cookie Policy for more details).

4. How We Use Your Data

Your personal data is used for the following purposes:

• To provide, operate, and improve the platform.
• To process transactions and manage subscriptions.
• To communicate with you regarding updates, promotional offers, or customer support.
• To comply with legal obligations and protect the platform from misuse.
• To analyze user behavior and enhance the user experience.

5. Legal Bases for Processing

We process your personal data based on one or more of the following legal grounds:

• Your consent (e.g., for marketing communications).
• Performance of a contract (e.g., providing subscription services).
• Compliance with legal obligations (e.g., tax and accounting requirements).
• Legitimate interests (e.g., improving the platform and preventing fraud).

6. Data Sharing

We do not sell your personal data. However, we may share your data with:

• Service providers: Third-party vendors who assist in operating the platform (e.g., payment processors, hosting providers).
• Legal authorities: When required to comply with applicable laws or respond to valid legal requests.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the relevant parties.

7. International Data Transfers

If your personal data is transferred outside of the European Economic Area (EEA), we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place to protect your data. Users may contact us for further information about these safeguards.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or to comply with legal obligations. Retention periods vary based on the type of data:

• Account information: Retained while your account is active.
• Transactional data: Retained for up to 7 years for compliance with tax and accounting laws.
• Marketing data: Retained until you withdraw your consent or unsubscribe.

When data is no longer required, we securely delete or anonymize it.

9. Your Rights

As a user, you have the following rights under the GDPR:

• Right to Access: Obtain confirmation about whether we process your data and access your data.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data, subject to legal obligations.
• Right to Restrict Processing: Request limited processing of your data in specific circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format and transfer it to another controller.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent where processing is based on your consent.
• Right to Lodge a Complaint: File a complaint with a supervisory authority if you believe your rights have been violated.

10. Children’s Privacy

The platform is not directed at children under the age of 13. StringScales does not knowingly collect personal data from children. If we become aware that personal data of a child has been collected without parental consent, we will take steps to delete such information promptly.

11. Data Security

We implement technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Measures include:

• Encryption of sensitive data.
• Regular security audits.
• Access controls to limit data access to authorized personnel only.

However, no system is entirely secure, and we cannot guarantee absolute security.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to analyze user behavior, improve the platform, and deliver personalized content. Users can manage their cookie preferences through their browser settings. For more information, please refer to our Cookie Policy.

13. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling processes that have legal or significant effects on users.

14. Updates to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated to you through the platform or via email. Your continued use of StringScales after updates constitutes your acceptance of the revised policy.

15. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your personal data, please contact us at indicode.tech@proton.me

---

By using StringScales, you acknowledge that you have read, understood, and agreed to this Privacy Policy.