Privacy

Policy

2. Information We Collect

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Provision: To provide our website generation services
• Account Management: To create and manage your user account
• Usage Monitoring: To track usage limits for free tier users
• Payment Processing: To process payments and manage subscriptions
• Communication: To send service-related communications
• Improvement: To improve our services and user experience
• Legal Compliance: To comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract: To perform our contract with you when you use our services
• Legitimate Interest: For usage tracking, service improvement, and security
• Consent: For cookies and marketing communications (where required)
• Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Third Parties

We share your information with the following third parties:

• Supabase: For authentication and database services
• Stripe: For payment processing and subscription management
• Amazon Bedrock (Claude): For AI-powered website generation (your content is processed but not stored)
• Service Providers: Other vendors who assist in operating our service

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

• Account Data: Retained for as long as your account is active
• Usage Tracking Data: Automatically deleted after 24 hours
• Uploaded Files: Temporarily processed and deleted within 24 hours of website generation
• Generated Websites: Stored for active subscriptions, deleted upon request or within 30 days of account closure
• Payment Data: Retained by Stripe according to their retention policies

7. Your Rights Under GDPR

If you are in the EU/EEA, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at help@relevantlabs.io.

8. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: To understand how you use our service
• Preference Cookies: To remember your settings and preferences

You can manage your cookie preferences through our cookie consent banner or your browser settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security audits and updates
• Data minimization and retention policies

10. International Data Transfers

Your data may be transferred to and processed in countries outside the EU/EEA. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses with service providers
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

11. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Information

For any questions about this Privacy Policy or to exercise your rights, please contact us:

14. Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with your local data protection supervisory authority.