Privacy Policy

Version 1.0 — Last updated: [DATE]

1. Controller

The controller responsible for processing your personal data is:

[Company name]
[Street, house number]
[Postal code, city]
Germany
E-Mail: [contact email]

2. Data We Collect

We collect and process the following personal data:

Account data: Email address, encrypted password
Profile data: First name, last name, company, country (optional)
Content data: Typefaces, blueprints, glyph sets, and other assets you create
Usage data: Download count, storage usage, subscription status
Consent records: Timestamps and versions of Terms and Privacy Policy acceptance
Payment data: Processed by Stripe — we store only a Stripe customer ID, not card details

3. Legal Basis for Processing (GDPR Art. 6)

Art. 6(1)(b): Performance of a contract — to provide the Service you signed up for
Art. 6(1)(c): Legal obligation — e.g., accounting and tax records
Art. 6(1)(a): Consent — for optional marketing communications
Art. 6(1)(f): Legitimate interests — for security, abuse prevention, and service improvement

4. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service. After account deletion, personal data is removed within 30 days unless retention is required by law (e.g., invoices are kept for 10 years per German tax law).

5. Third-Party Services

Stripe (payment processing) — privacy policy at stripe.com/privacy
[Add any other third-party services, e.g., hosting provider, analytics]

6. Your Rights (GDPR)

Under the GDPR you have the following rights:

Right of access (Art. 15) — request a copy of your data
Right to rectification (Art. 16) — correct inaccurate data
Right to erasure (Art. 17) — delete your account and data
Right to data portability (Art. 20) — export your data in machine-readable format
Right to object (Art. 21) — object to processing based on legitimate interests
Right to withdraw consent (Art. 7(3)) — withdraw marketing consent at any time

To exercise your rights, contact us via the Impressum or use the data export feature in your account settings.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with the Berlin data protection authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin
www.datenschutz-berlin.de

8. Changes to This Policy

We may update this policy when the law requires it or when we change how we process data. We will notify you and, where required, ask for renewed consent.