1. Introduction

EpicMindArt ("we", "our", "us") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights.

Controller / Contact:

• Business: EPICMINDART
• Contact email: EpicMindArt@gmail.com
• Address: Dahestanska St., 5, Kharkiv, Ukraine

2. Scope

This Policy applies to all visitors and users of our Sites and Services, including users in the United States, European Union, United Kingdom, India, UAE, and worldwide.

3. Data we collect

We collect the following categories of personal data:

• Identity & contact data: name, email, billing address, company name.
• Account data: username, hashed password (if applicable), account settings, subscription IDs (e.g., Paddle subscription_id), transaction history.
• Payment data: processed by Paddle (we only receive non-sensitive transaction records), or by other providers.
• Usage data: pages viewed, features used, timestamps, logs.
• Device & technical data: IP address, browser type, OS, device identifiers, cookies.
• Communications: emails, support tickets, feedback.
• Marketing preferences: opt-in/opt-out status.

We do not collect or store full payment card details; Paddle and other processors manage card data.

4. How we use your data (purposes & lawful bases)

We use personal data for the following purposes:

• To provide and maintain Services (Contractual basis).
• To process payments and prevent fraud (Contractual / Legitimate interest).
• To send transactional communications (receipts, invoices, subscription notices) (Contractual / Legitimate interest).
• To send marketing communications where you consented (Consent).
• To improve the Services, analytics, debugging (Legitimate interest).
• To comply with legal obligations (Legal obligation).

5. Third‑party processors and international transfers

We use the following third parties (example list — update to match your stack):

• Paddle — payment processing and subscription management. (Paddle privacy: https://paddle.com/privacy)
• Supabase — database, auth, file storage.
• Vercel — hosting and deployment.
• Resend — transactional email delivery.
• Analytics providers: Google Analytics / Plausible / Vercel, Microsoft Clarity.

These providers may process data outside your country. If you are in the EU, we rely on appropriate safeguards (standard contractual clauses) or processors located in jurisdictions with adequate protections. You can request details of transfers by contacting EpicMindArt@gmail.com

6. Cookies and similar technologies

We use cookies for essential functionality, analytics, and marketing. See our Cookie Policy for details.

7. Data retention

We retain personal data necessary to provide Services, comply with legal obligations, resolve disputes, and enforce agreements. Typical retention: account & transaction records — up to 7 years or as required by law; support logs — up to 2 years; marketing data — until you unsubscribe.

8. Your rights (EU / UK users)

If you are in the EU/UK, you have rights including: access, rectification, erasure, restriction, portability, objection to processing, and withdraw consent. To exercise these rights, contact EpicMindArt@gmail.com

9. Children

The Services are not directed to children under 16. We do not knowingly collect personal data from children under 16.

10. Security

We implement reasonable technical and organizational measures to protect personal data. However, no transmission over the internet is fully secure.

11. Changes to this Policy

We may update this policy; the date above indicates the last update.

12. Contact

Data protection questions: EpicMindArt@gmail.com