Privacy Policy

Effective: February 23, 2024

1. Introduction

This Privacy Policy governs data practices for sweets.chat ("Service"), operated by Domain Owner ("we", "our"). By using the Service, you consent to data handling as described below.

2. Data Collection

2.1 Collected Information

  • Account Data: Username, email, contact details
  • Content Data: Blog posts, images, and knowledge base content created using our tools
  • Operational Data: Usage patterns, system logs, device information
  • Payment Data: Exclusively processed by Paddle.com (PCI DSS Level 1 compliant)

2.2 Collection Methods

  • Direct user input
  • Automated tracking technologies
  • Third-party payment processing

3. Use of Data

3.1 Primary Purposes

  • Service delivery and maintenance
  • Content storage and organization
  • Payment processing
  • Security enforcement
  • Legal compliance

3.2 Analytical Uses

  • Product improvement
  • Usage trend analysis
  • Feature optimization

4. Data Sharing

4.1 Third-Party Processors

| Processor | Purpose | Data Scope | |-----------|---------|------------| | Paddle.com | Payment processing | Transaction metadata | | Cloudflare | Security services | Network logs | | Google Analytics | Usage tracking | Behavioral data |

4.2 Legal Disclosures

We disclose data when required by:

  • Court orders
  • Regulatory investigations
  • Intellectual property disputes

5. Data Security

5.1 Protection Measures

  • AES-256 encryption at rest
  • TLS 1.3+ in transit
  • Regular penetration testing
  • Paddle-managed PCI DSS compliance

5.2 Payment Security

  • Zero-access architecture for financial data
  • Tokenized transaction processing
  • SOC 2 Type II certified infrastructure

6. Data Retention

6.1 Retention Periods

  • Active accounts: Until deletion request
  • Content data: Until manual deletion by user
  • Payment records: 7 years (tax compliance)
  • System logs: 90 days rolling retention

6.2 Deletion Protocols

  • 72-hour fulfillment window for deletion requests
  • Cryptographic erasure for storage media
  • Backup rotation every 30 days

7. International Transfers

  • Data transferred under EU SCCs and UK IDTA
  • Paddle infrastructure spans 20+ jurisdictions
  • Audit-ready transfer impact assessments

8. Your Rights

| Right | Implementation | |-------|----------------| | Access | GDPR Article 15 compliance | | Rectification | 48-hour update guarantee | | Erasure | Cryptographic deletion | | Portability | JSON/CSV export options |

9. Policy Updates

  • Material changes: 30-day advance notice
  • Version history available on request
  • Email notification for substantial revisions

10. Contact

Data Controller:
Domain Owner
[email protected]

Payment Data Inquiries:
[email protected]

Related Documents:
Terms of Service |
Paddle Privacy Policy